Known vulnerabilities in Jetpack by WordPress.com

Vendor: Automattic
Software CPE: cpe:2.3:a:Automattic:jetpack:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jetpack by WordPress.com Jetpack by WordPress.com is affected by 3 known vulnerabilities: 1 high, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22896 - Improper input validation
CWE-20 High
No
No
7.9.1 21.11.2019 SB2019112121
#VU20525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
6.5 02.09.2019 SB2018121128
#VU19801 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10705
CWE-79 Low
No
No
4.0.4 02.08.2019 SB2016062003