Read the docs

jetpack

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

jetpack records in CISA KEV

No jetpack vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the post_id parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00204 Published 2026-05-10 No fix listed CWE-79
Open these records in search →