Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access
Priority LOW 23Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01283 70th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed Jetpack (Unknown): 13.9.1, 13.8.2, 13.7.1 +98
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | Jetpack | 13.9 to before 13.9.1 | 13.9.1 | Patch available | CNA |
| Unknown | Jetpack | 13.8 to before 13.8.2 | 13.8.2 | Patch available | CNA |
| Unknown | Jetpack | 13.7 to before 13.7.1 | 13.7.1 | Patch available | CNA |
| Unknown | Jetpack | 13.6 to before 13.6.1 | 13.6.1 | Patch available | CNA |
| Unknown | Jetpack | 13.5 to before 13.5.1 | 13.5.1 | Patch available | CNA |
| Unknown | Jetpack | 13.4 to before 13.4.4 | 13.4.4 | Patch available | CNA |
| Unknown | Jetpack | 13.3 to before 13.3.2 | 13.3.2 | Patch available | CNA |
| Unknown | Jetpack | 13.2 to before 13.2.3 | 13.2.3 | Patch available | CNA |
| Unknown | Jetpack | 13.1 to before 13.1.4 | 13.1.4 | Patch available | CNA |
| Unknown | Jetpack | 13.0 to before 13.0.1 | 13.0.1 | Patch available | CNA |
| Unknown | Jetpack | 12.9 to before 12.9.4 | 12.9.4 | Patch available | CNA |
| Unknown | Jetpack | 12.8 to before 12.8.2 | 12.8.2 | Patch available | CNA |
| Unknown | Jetpack | 12.7 to before 12.7.2 | 12.7.2 | Patch available | CNA |
| Unknown | Jetpack | 12.6 to before 12.6.3 | 12.6.3 | Patch available | CNA |
| Unknown | Jetpack | 12.5 to before 12.5.1 | 12.5.1 | Patch available | CNA |
| Unknown | Jetpack | 12.4 to before 12.4.1 | 12.4.1 | Patch available | CNA |
| Unknown | Jetpack | 12.3 to before 12.3.1 | 12.3.1 | Patch available | CNA |
| Unknown | Jetpack | 12.2 to before 12.2.2 | 12.2.2 | Patch available | CNA |
| Unknown | Jetpack | 12.1 to before 12.1.2 | 12.1.2 | Patch available | CNA |
| Unknown | Jetpack | 12.0 to before 12.0.2 | 12.0.2 | Patch available | CNA |
| Unknown | Jetpack | 11.9 to before 11.9.3 | 11.9.3 | Patch available | CNA |
| Unknown | Jetpack | 11.8 to before 11.8.6 | 11.8.6 | Patch available | CNA |
| Unknown | Jetpack | 11.7 to before 11.7.3 | 11.7.3 | Patch available | CNA |
| Unknown | Jetpack | 11.6 to before 11.6.2 | 11.6.2 | Patch available | CNA |
| Unknown | Jetpack | 11.5 to before 11.5.3 | 11.5.3 | Patch available | CNA |
| Unknown | Jetpack | 11.4 to before 11.4.2 | 11.4.2 | Patch available | CNA |
| Unknown | Jetpack | 11.3 to before 11.3.4 | 11.3.4 | Patch available | CNA |
| Unknown | Jetpack | 11.2 to before 11.2.2 | 11.2.2 | Patch available | CNA |
| Unknown | Jetpack | 11.1 to before 11.1.4 | 11.1.4 | Patch available | CNA |
| Unknown | Jetpack | 11.0 to before 11.0.2 | 11.0.2 | Patch available | CNA |
| Unknown | Jetpack | 10.9 to before 10.9.3 | 10.9.3 | Patch available | CNA |
| Unknown | Jetpack | 10.8 to before 10.8.2 | 10.8.2 | Patch available | CNA |
| Unknown | Jetpack | 10.7 to before 10.7.2 | 10.7.2 | Patch available | CNA |
| Unknown | Jetpack | 10.6 to before 10.6.2 | 10.6.2 | Patch available | CNA |
| Unknown | Jetpack | 10.5 to before 10.5.3 | 10.5.3 | Patch available | CNA |
| Unknown | Jetpack | 10.4 to before 10.4.2 | 10.4.2 | Patch available | CNA |
| Unknown | Jetpack | 10.3 to before 10.3.2 | 10.3.2 | Patch available | CNA |
| Unknown | Jetpack | 10.2 to before 10.2.3 | 10.2.3 | Patch available | CNA |
| Unknown | Jetpack | 10.1 to before 10.1.2 | 10.1.2 | Patch available | CNA |
| Unknown | Jetpack | 10.0 to before 10.0.2 | 10.0.2 | Patch available | CNA |
| Unknown | Jetpack | 9.9 to before 9.9.3 | 9.9.3 | Patch available | CNA |
| Unknown | Jetpack | 9.8 to before 9.8.3 | 9.8.3 | Patch available | CNA |
| Unknown | Jetpack | 9.7 to before 9.7.3 | 9.7.3 | Patch available | CNA |
| Unknown | Jetpack | 9.6 to before 9.6.4 | 9.6.4 | Patch available | CNA |
| Unknown | Jetpack | 9.5 to before 9.5.5 | 9.5.5 | Patch available | CNA |
| Unknown | Jetpack | 9.4 to before 9.4.4 | 9.4.4 | Patch available | CNA |
| Unknown | Jetpack | 9.3 to before 9.3.5 | 9.3.5 | Patch available | CNA |
| Unknown | Jetpack | 9.2 to before 9.2.4 | 9.2.4 | Patch available | CNA |
| Unknown | Jetpack | 9.1 to before 9.1.3 | 9.1.3 | Patch available | CNA |
| Unknown | Jetpack | 9.0 to before 9.0.5 | 9.0.5 | Patch available | CNA |
| Unknown | Jetpack | 8.9 to before 8.9.4 | 8.9.4 | Patch available | CNA |
| Unknown | Jetpack | 8.8 to before 8.8.5 | 8.8.5 | Patch available | CNA |
| Unknown | Jetpack | 8.7 to before 8.7.4 | 8.7.4 | Patch available | CNA |
| Unknown | Jetpack | 8.6 to before 8.6.4 | 8.6.4 | Patch available | CNA |
| Unknown | Jetpack | 8.5 to before 8.5.3 | 8.5.3 | Patch available | CNA |
| Unknown | Jetpack | 8.4 to before 8.4.5 | 8.4.5 | Patch available | CNA |
| Unknown | Jetpack | 8.3 to before 8.3.3 | 8.3.3 | Patch available | CNA |
| Unknown | Jetpack | 8.2 to before 8.2.6 | 8.2.6 | Patch available | CNA |
| Unknown | Jetpack | 8.1 to before 8.1.4 | 8.1.4 | Patch available | CNA |
| Unknown | Jetpack | 8.0 to before 8.0.3 | 8.0.3 | Patch available | CNA |
| Unknown | Jetpack | 7.9 to before 7.9.4 | 7.9.4 | Patch available | CNA |
| Unknown | Jetpack | 7.8 to before 7.8.4 | 7.8.4 | Patch available | CNA |
| Unknown | Jetpack | 7.7 to before 7.7.6 | 7.7.6 | Patch available | CNA |
| Unknown | Jetpack | 7.6 to before 7.6.4 | 7.6.4 | Patch available | CNA |
| Unknown | Jetpack | 7.5 to before 7.5.7 | 7.5.7 | Patch available | CNA |
| Unknown | Jetpack | 7.4 to before 7.4.5 | 7.4.5 | Patch available | CNA |
| Unknown | Jetpack | 7.3 to before 7.3.5 | 7.3.5 | Patch available | CNA |
| Unknown | Jetpack | 7.2 to before 7.2.5 | 7.2.5 | Patch available | CNA |
| Unknown | Jetpack | 7.1 to before 7.1.5 | 7.1.5 | Patch available | CNA |
| Unknown | Jetpack | 7.0 to before 7.0.5 | 7.0.5 | Patch available | CNA |
| Unknown | Jetpack | 6.9 to before 6.9.4 | 6.9.4 | Patch available | CNA |
| Unknown | Jetpack | 6.8 to before 6.8.5 | 6.8.5 | Patch available | CNA |
| Unknown | Jetpack | 6.7 to before 6.7.4 | 6.7.4 | Patch available | CNA |
| Unknown | Jetpack | 6.6 to before 6.6.5 | 6.6.5 | Patch available | CNA |
| Unknown | Jetpack | 6.5 to before 6.5.4 | 6.5.4 | Patch available | CNA |
| Unknown | Jetpack | 6.4 to before 6.4.6 | 6.4.6 | Patch available | CNA |
| Unknown | Jetpack | 6.3 to before 6.3.7 | 6.3.7 | Patch available | CNA |
| Unknown | Jetpack | 6.2 to before 6.2.5 | 6.2.5 | Patch available | CNA |
| Unknown | Jetpack | 6.1 to before 6.1.5 | 6.1.5 | Patch available | CNA |
| Unknown | Jetpack | 6.0 to before 6.0.4 | 6.0.4 | Patch available | CNA |
| Unknown | Jetpack | 5.9 to before 5.9.4 | 5.9.4 | Patch available | CNA |
| Unknown | Jetpack | 5.8 to before 5.8.4 | 5.8.4 | Patch available | CNA |
| Unknown | Jetpack | 5.7 to before 5.7.5 | 5.7.5 | Patch available | CNA |
| Unknown | Jetpack | 5.6 to before 5.6.5 | 5.6.5 | Patch available | CNA |
| Unknown | Jetpack | 5.5 to before 5.5.5 | 5.5.5 | Patch available | CNA |
| Unknown | Jetpack | 5.4 to before 5.4.4 | 5.4.4 | Patch available | CNA |
| Unknown | Jetpack | 5.3 to before 5.3.4 | 5.3.4 | Patch available | CNA |
| Unknown | Jetpack | 5.2 to before 5.2.5 | 5.2.5 | Patch available | CNA |
| Unknown | Jetpack | 5.1 to before 5.1.4 | 5.1.4 | Patch available | CNA |
| Unknown | Jetpack | 5.0 to before 5.0.3 | 5.0.3 | Patch available | CNA |
| Unknown | Jetpack | 4.9 to before 4.9.3 | 4.9.3 | Patch available | CNA |
| Unknown | Jetpack | 4.8 to before 4.8.5 | 4.8.5 | Patch available | CNA |
| Unknown | Jetpack | 4.7 to before 4.7.4 | 4.7.4 | Patch available | CNA |
| Unknown | Jetpack | 4.6 to before 4.6.3 | 4.6.3 | Patch available | CNA |
| Unknown | Jetpack | 4.5 to before 4.5.3 | 4.5.3 | Patch available | CNA |
| Unknown | Jetpack | 4.4 to before 4.4.5 | 4.4.5 | Patch available | CNA |
| Unknown | Jetpack | 4.3 to before 4.3.5 | 4.3.5 | Patch available | CNA |
| Unknown | Jetpack | 4.2 to before 4.2.5 | 4.2.5 | Patch available | CNA |
| Unknown | Jetpack | 4.1.0 to before 4.1.4 | 4.1.4 | Patch available | CNA |
| Unknown | Jetpack | 4.0.0 to before 4.0.7 | 4.0.7 | Patch available | CNA |
| Unknown | Jetpack | 3.9.2 to before 3.9.10 | 3.9.10 | Patch available | CNA |
- Jetpack VendorUnknown Affected 13.9 to before 13.9.1 Fixed in 13.9.1 Patch available CNA
- Jetpack VendorUnknown Affected 13.8 to before 13.8.2 Fixed in 13.8.2 Patch available CNA
- Jetpack VendorUnknown Affected 13.7 to before 13.7.1 Fixed in 13.7.1 Patch available CNA
- Jetpack VendorUnknown Affected 13.6 to before 13.6.1 Fixed in 13.6.1 Patch available CNA
- Jetpack VendorUnknown Affected 13.5 to before 13.5.1 Fixed in 13.5.1 Patch available CNA
- Jetpack VendorUnknown Affected 13.4 to before 13.4.4 Fixed in 13.4.4 Patch available CNA
- Jetpack VendorUnknown Affected 13.3 to before 13.3.2 Fixed in 13.3.2 Patch available CNA
- Jetpack VendorUnknown Affected 13.2 to before 13.2.3 Fixed in 13.2.3 Patch available CNA
- Jetpack VendorUnknown Affected 13.1 to before 13.1.4 Fixed in 13.1.4 Patch available CNA
- Jetpack VendorUnknown Affected 13.0 to before 13.0.1 Fixed in 13.0.1 Patch available CNA
- Jetpack VendorUnknown Affected 12.9 to before 12.9.4 Fixed in 12.9.4 Patch available CNA
- Jetpack VendorUnknown Affected 12.8 to before 12.8.2 Fixed in 12.8.2 Patch available CNA
- Jetpack VendorUnknown Affected 12.7 to before 12.7.2 Fixed in 12.7.2 Patch available CNA
- Jetpack VendorUnknown Affected 12.6 to before 12.6.3 Fixed in 12.6.3 Patch available CNA
- Jetpack VendorUnknown Affected 12.5 to before 12.5.1 Fixed in 12.5.1 Patch available CNA
- Jetpack VendorUnknown Affected 12.4 to before 12.4.1 Fixed in 12.4.1 Patch available CNA
- Jetpack VendorUnknown Affected 12.3 to before 12.3.1 Fixed in 12.3.1 Patch available CNA
- Jetpack VendorUnknown Affected 12.2 to before 12.2.2 Fixed in 12.2.2 Patch available CNA
- Jetpack VendorUnknown Affected 12.1 to before 12.1.2 Fixed in 12.1.2 Patch available CNA
- Jetpack VendorUnknown Affected 12.0 to before 12.0.2 Fixed in 12.0.2 Patch available CNA
- Jetpack VendorUnknown Affected 11.9 to before 11.9.3 Fixed in 11.9.3 Patch available CNA
- Jetpack VendorUnknown Affected 11.8 to before 11.8.6 Fixed in 11.8.6 Patch available CNA
- Jetpack VendorUnknown Affected 11.7 to before 11.7.3 Fixed in 11.7.3 Patch available CNA
- Jetpack VendorUnknown Affected 11.6 to before 11.6.2 Fixed in 11.6.2 Patch available CNA
- Jetpack VendorUnknown Affected 11.5 to before 11.5.3 Fixed in 11.5.3 Patch available CNA
- Jetpack VendorUnknown Affected 11.4 to before 11.4.2 Fixed in 11.4.2 Patch available CNA
- Jetpack VendorUnknown Affected 11.3 to before 11.3.4 Fixed in 11.3.4 Patch available CNA
- Jetpack VendorUnknown Affected 11.2 to before 11.2.2 Fixed in 11.2.2 Patch available CNA
- Jetpack VendorUnknown Affected 11.1 to before 11.1.4 Fixed in 11.1.4 Patch available CNA
- Jetpack VendorUnknown Affected 11.0 to before 11.0.2 Fixed in 11.0.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.9 to before 10.9.3 Fixed in 10.9.3 Patch available CNA
- Jetpack VendorUnknown Affected 10.8 to before 10.8.2 Fixed in 10.8.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.7 to before 10.7.2 Fixed in 10.7.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.6 to before 10.6.2 Fixed in 10.6.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.5 to before 10.5.3 Fixed in 10.5.3 Patch available CNA
- Jetpack VendorUnknown Affected 10.4 to before 10.4.2 Fixed in 10.4.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.3 to before 10.3.2 Fixed in 10.3.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.2 to before 10.2.3 Fixed in 10.2.3 Patch available CNA
- Jetpack VendorUnknown Affected 10.1 to before 10.1.2 Fixed in 10.1.2 Patch available CNA
- Jetpack VendorUnknown Affected 10.0 to before 10.0.2 Fixed in 10.0.2 Patch available CNA
- Jetpack VendorUnknown Affected 9.9 to before 9.9.3 Fixed in 9.9.3 Patch available CNA
- Jetpack VendorUnknown Affected 9.8 to before 9.8.3 Fixed in 9.8.3 Patch available CNA
- Jetpack VendorUnknown Affected 9.7 to before 9.7.3 Fixed in 9.7.3 Patch available CNA
- Jetpack VendorUnknown Affected 9.6 to before 9.6.4 Fixed in 9.6.4 Patch available CNA
- Jetpack VendorUnknown Affected 9.5 to before 9.5.5 Fixed in 9.5.5 Patch available CNA
- Jetpack VendorUnknown Affected 9.4 to before 9.4.4 Fixed in 9.4.4 Patch available CNA
- Jetpack VendorUnknown Affected 9.3 to before 9.3.5 Fixed in 9.3.5 Patch available CNA
- Jetpack VendorUnknown Affected 9.2 to before 9.2.4 Fixed in 9.2.4 Patch available CNA
- Jetpack VendorUnknown Affected 9.1 to before 9.1.3 Fixed in 9.1.3 Patch available CNA
- Jetpack VendorUnknown Affected 9.0 to before 9.0.5 Fixed in 9.0.5 Patch available CNA
- Jetpack VendorUnknown Affected 8.9 to before 8.9.4 Fixed in 8.9.4 Patch available CNA
- Jetpack VendorUnknown Affected 8.8 to before 8.8.5 Fixed in 8.8.5 Patch available CNA
- Jetpack VendorUnknown Affected 8.7 to before 8.7.4 Fixed in 8.7.4 Patch available CNA
- Jetpack VendorUnknown Affected 8.6 to before 8.6.4 Fixed in 8.6.4 Patch available CNA
- Jetpack VendorUnknown Affected 8.5 to before 8.5.3 Fixed in 8.5.3 Patch available CNA
- Jetpack VendorUnknown Affected 8.4 to before 8.4.5 Fixed in 8.4.5 Patch available CNA
- Jetpack VendorUnknown Affected 8.3 to before 8.3.3 Fixed in 8.3.3 Patch available CNA
- Jetpack VendorUnknown Affected 8.2 to before 8.2.6 Fixed in 8.2.6 Patch available CNA
- Jetpack VendorUnknown Affected 8.1 to before 8.1.4 Fixed in 8.1.4 Patch available CNA
- Jetpack VendorUnknown Affected 8.0 to before 8.0.3 Fixed in 8.0.3 Patch available CNA
- Jetpack VendorUnknown Affected 7.9 to before 7.9.4 Fixed in 7.9.4 Patch available CNA
- Jetpack VendorUnknown Affected 7.8 to before 7.8.4 Fixed in 7.8.4 Patch available CNA
- Jetpack VendorUnknown Affected 7.7 to before 7.7.6 Fixed in 7.7.6 Patch available CNA
- Jetpack VendorUnknown Affected 7.6 to before 7.6.4 Fixed in 7.6.4 Patch available CNA
- Jetpack VendorUnknown Affected 7.5 to before 7.5.7 Fixed in 7.5.7 Patch available CNA
- Jetpack VendorUnknown Affected 7.4 to before 7.4.5 Fixed in 7.4.5 Patch available CNA
- Jetpack VendorUnknown Affected 7.3 to before 7.3.5 Fixed in 7.3.5 Patch available CNA
- Jetpack VendorUnknown Affected 7.2 to before 7.2.5 Fixed in 7.2.5 Patch available CNA
- Jetpack VendorUnknown Affected 7.1 to before 7.1.5 Fixed in 7.1.5 Patch available CNA
- Jetpack VendorUnknown Affected 7.0 to before 7.0.5 Fixed in 7.0.5 Patch available CNA
- Jetpack VendorUnknown Affected 6.9 to before 6.9.4 Fixed in 6.9.4 Patch available CNA
- Jetpack VendorUnknown Affected 6.8 to before 6.8.5 Fixed in 6.8.5 Patch available CNA
- Jetpack VendorUnknown Affected 6.7 to before 6.7.4 Fixed in 6.7.4 Patch available CNA
- Jetpack VendorUnknown Affected 6.6 to before 6.6.5 Fixed in 6.6.5 Patch available CNA
- Jetpack VendorUnknown Affected 6.5 to before 6.5.4 Fixed in 6.5.4 Patch available CNA
- Jetpack VendorUnknown Affected 6.4 to before 6.4.6 Fixed in 6.4.6 Patch available CNA
- Jetpack VendorUnknown Affected 6.3 to before 6.3.7 Fixed in 6.3.7 Patch available CNA
- Jetpack VendorUnknown Affected 6.2 to before 6.2.5 Fixed in 6.2.5 Patch available CNA
- Jetpack VendorUnknown Affected 6.1 to before 6.1.5 Fixed in 6.1.5 Patch available CNA
- Jetpack VendorUnknown Affected 6.0 to before 6.0.4 Fixed in 6.0.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.9 to before 5.9.4 Fixed in 5.9.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.8 to before 5.8.4 Fixed in 5.8.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.7 to before 5.7.5 Fixed in 5.7.5 Patch available CNA
- Jetpack VendorUnknown Affected 5.6 to before 5.6.5 Fixed in 5.6.5 Patch available CNA
- Jetpack VendorUnknown Affected 5.5 to before 5.5.5 Fixed in 5.5.5 Patch available CNA
- Jetpack VendorUnknown Affected 5.4 to before 5.4.4 Fixed in 5.4.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.3 to before 5.3.4 Fixed in 5.3.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.2 to before 5.2.5 Fixed in 5.2.5 Patch available CNA
- Jetpack VendorUnknown Affected 5.1 to before 5.1.4 Fixed in 5.1.4 Patch available CNA
- Jetpack VendorUnknown Affected 5.0 to before 5.0.3 Fixed in 5.0.3 Patch available CNA
- Jetpack VendorUnknown Affected 4.9 to before 4.9.3 Fixed in 4.9.3 Patch available CNA
- Jetpack VendorUnknown Affected 4.8 to before 4.8.5 Fixed in 4.8.5 Patch available CNA
- Jetpack VendorUnknown Affected 4.7 to before 4.7.4 Fixed in 4.7.4 Patch available CNA
- Jetpack VendorUnknown Affected 4.6 to before 4.6.3 Fixed in 4.6.3 Patch available CNA
- Jetpack VendorUnknown Affected 4.5 to before 4.5.3 Fixed in 4.5.3 Patch available CNA
- Jetpack VendorUnknown Affected 4.4 to before 4.4.5 Fixed in 4.4.5 Patch available CNA
- Jetpack VendorUnknown Affected 4.3 to before 4.3.5 Fixed in 4.3.5 Patch available CNA
- Jetpack VendorUnknown Affected 4.2 to before 4.2.5 Fixed in 4.2.5 Patch available CNA
- Jetpack VendorUnknown Affected 4.1.0 to before 4.1.4 Fixed in 4.1.4 Patch available CNA
- Jetpack VendorUnknown Affected 4.0.0 to before 4.0.7 Fixed in 4.0.7 Patch available CNA
- Jetpack VendorUnknown Affected 3.9.2 to before 3.9.10 Fixed in 3.9.10 Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:* | 13.1 to before 13.1.4; 13.2 to before 13.2.3; 13.3 to before 13.3.2; 13.4 to before 13.4.4; 13.8 to before 13.8.2 | Vulnerable | Automattic |
| cpe:2.3:a:automattic:jetpack:13.0:*:*:*:*:wordpress:*:* | 13.0 | Vulnerable | Automattic |
| cpe:2.3:a:automattic:jetpack:13.5:*:*:*:*:wordpress:*:* | 13.5 | Vulnerable | Automattic |
| cpe:2.3:a:automattic:jetpack:13.6:*:*:*:*:wordpress:*:* | 13.6 | Vulnerable | Automattic |
| cpe:2.3:a:automattic:jetpack:13.7:*:*:*:*:wordpress:*:* | 13.7 | Vulnerable | Automattic |
| cpe:2.3:a:automattic:jetpack:13.9:*:*:*:*:wordpress:*:* | 13.9 | Vulnerable | Automattic |
- cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:* Versions 13.1 to before 13.1.4; 13.2 to before 13.2.3; 13.3 to before 13.3.2; 13.4 to before 13.4.4; 13.8 to before 13.8.2 Vulnerable ·Automattic
- cpe:2.3:a:automattic:jetpack:13.0:*:*:*:*:wordpress:*:* Versions 13.0 Vulnerable ·Automattic
- cpe:2.3:a:automattic:jetpack:13.5:*:*:*:*:wordpress:*:* Versions 13.5 Vulnerable ·Automattic
- cpe:2.3:a:automattic:jetpack:13.6:*:*:*:*:wordpress:*:* Versions 13.6 Vulnerable ·Automattic
- cpe:2.3:a:automattic:jetpack:13.7:*:*:*:*:wordpress:*:* Versions 13.7 Vulnerable ·Automattic
- cpe:2.3:a:automattic:jetpack:13.9:*:*:*:*:wordpress:*:* Versions 13.9 Vulnerable ·Automattic
Remediation
- Fix · CNA Jetpack (Unknown) Fixed in 13.9.1
- Fix · CNA Jetpack (Unknown) Fixed in 13.8.2
- Fix · CNA Jetpack (Unknown) Fixed in 13.7.1
- Fix · CNA Jetpack (Unknown) Fixed in 13.6.1
- Fix · CNA Jetpack (Unknown) Fixed in 13.5.1
- Fix · CNA Jetpack (Unknown) Fixed in 13.4.4
- Fix · CNA Jetpack (Unknown) Fixed in 13.3.2
- Fix · CNA Jetpack (Unknown) Fixed in 13.2.3
- Fix · CNA Jetpack (Unknown) Fixed in 13.1.4
- Fix · CNA Jetpack (Unknown) Fixed in 13.0.1
- Fix · CNA Jetpack (Unknown) Fixed in 12.9.4
- Fix · CNA Jetpack (Unknown) Fixed in 12.8.2
- Fix · CNA Jetpack (Unknown) Fixed in 12.7.2
- Fix · CNA Jetpack (Unknown) Fixed in 12.6.3
- Fix · CNA Jetpack (Unknown) Fixed in 12.5.1
- Fix · CNA Jetpack (Unknown) Fixed in 12.4.1
- Fix · CNA Jetpack (Unknown) Fixed in 12.3.1
- Fix · CNA Jetpack (Unknown) Fixed in 12.2.2
- Fix · CNA Jetpack (Unknown) Fixed in 12.1.2
- Fix · CNA Jetpack (Unknown) Fixed in 12.0.2
- Fix · CNA Jetpack (Unknown) Fixed in 11.9.3
- Fix · CNA Jetpack (Unknown) Fixed in 11.8.6
- Fix · CNA Jetpack (Unknown) Fixed in 11.7.3
- Fix · CNA Jetpack (Unknown) Fixed in 11.6.2
- Fix · CNA Jetpack (Unknown) Fixed in 11.5.3
- Fix · CNA Jetpack (Unknown) Fixed in 11.4.2
- Fix · CNA Jetpack (Unknown) Fixed in 11.3.4
- Fix · CNA Jetpack (Unknown) Fixed in 11.2.2
- Fix · CNA Jetpack (Unknown) Fixed in 11.1.4
- Fix · CNA Jetpack (Unknown) Fixed in 11.0.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.9.3
- Fix · CNA Jetpack (Unknown) Fixed in 10.8.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.7.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.6.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.5.3
- Fix · CNA Jetpack (Unknown) Fixed in 10.4.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.3.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.2.3
- Fix · CNA Jetpack (Unknown) Fixed in 10.1.2
- Fix · CNA Jetpack (Unknown) Fixed in 10.0.2
- Fix · CNA Jetpack (Unknown) Fixed in 9.9.3
- Fix · CNA Jetpack (Unknown) Fixed in 9.8.3
- Fix · CNA Jetpack (Unknown) Fixed in 9.7.3
- Fix · CNA Jetpack (Unknown) Fixed in 9.6.4
- Fix · CNA Jetpack (Unknown) Fixed in 9.5.5
- Fix · CNA Jetpack (Unknown) Fixed in 9.4.4
- Fix · CNA Jetpack (Unknown) Fixed in 9.3.5
- Fix · CNA Jetpack (Unknown) Fixed in 9.2.4
- Fix · CNA Jetpack (Unknown) Fixed in 9.1.3
- Fix · CNA Jetpack (Unknown) Fixed in 9.0.5
- Fix · CNA Jetpack (Unknown) Fixed in 8.9.4
- Fix · CNA Jetpack (Unknown) Fixed in 8.8.5
- Fix · CNA Jetpack (Unknown) Fixed in 8.7.4
- Fix · CNA Jetpack (Unknown) Fixed in 8.6.4
- Fix · CNA Jetpack (Unknown) Fixed in 8.5.3
- Fix · CNA Jetpack (Unknown) Fixed in 8.4.5
- Fix · CNA Jetpack (Unknown) Fixed in 8.3.3
- Fix · CNA Jetpack (Unknown) Fixed in 8.2.6
- Fix · CNA Jetpack (Unknown) Fixed in 8.1.4
- Fix · CNA Jetpack (Unknown) Fixed in 8.0.3
- Fix · CNA Jetpack (Unknown) Fixed in 7.9.4
- Fix · CNA Jetpack (Unknown) Fixed in 7.8.4
- Fix · CNA Jetpack (Unknown) Fixed in 7.7.6
- Fix · CNA Jetpack (Unknown) Fixed in 7.6.4
- Fix · CNA Jetpack (Unknown) Fixed in 7.5.7
- Fix · CNA Jetpack (Unknown) Fixed in 7.4.5
- Fix · CNA Jetpack (Unknown) Fixed in 7.3.5
- Fix · CNA Jetpack (Unknown) Fixed in 7.2.5
- Fix · CNA Jetpack (Unknown) Fixed in 7.1.5
- Fix · CNA Jetpack (Unknown) Fixed in 7.0.5
- Fix · CNA Jetpack (Unknown) Fixed in 6.9.4
- Fix · CNA Jetpack (Unknown) Fixed in 6.8.5
- Fix · CNA Jetpack (Unknown) Fixed in 6.7.4
- Fix · CNA Jetpack (Unknown) Fixed in 6.6.5
- Fix · CNA Jetpack (Unknown) Fixed in 6.5.4
- Fix · CNA Jetpack (Unknown) Fixed in 6.4.6
- Fix · CNA Jetpack (Unknown) Fixed in 6.3.7
- Fix · CNA Jetpack (Unknown) Fixed in 6.2.5
- Fix · CNA Jetpack (Unknown) Fixed in 6.1.5
- Fix · CNA Jetpack (Unknown) Fixed in 6.0.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.9.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.8.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.7.5
- Fix · CNA Jetpack (Unknown) Fixed in 5.6.5
- Fix · CNA Jetpack (Unknown) Fixed in 5.5.5
- Fix · CNA Jetpack (Unknown) Fixed in 5.4.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.3.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.2.5
- Fix · CNA Jetpack (Unknown) Fixed in 5.1.4
- Fix · CNA Jetpack (Unknown) Fixed in 5.0.3
- Fix · CNA Jetpack (Unknown) Fixed in 4.9.3
- Fix · CNA Jetpack (Unknown) Fixed in 4.8.5
- Fix · CNA Jetpack (Unknown) Fixed in 4.7.4
- Fix · CNA Jetpack (Unknown) Fixed in 4.6.3
- Fix · CNA Jetpack (Unknown) Fixed in 4.5.3
- Fix · CNA Jetpack (Unknown) Fixed in 4.4.5
- Fix · CNA Jetpack (Unknown) Fixed in 4.3.5
- Fix · CNA Jetpack (Unknown) Fixed in 4.2.5
- Fix · CNA Jetpack (Unknown) Fixed in 4.1.4
- Fix · CNA Jetpack (Unknown) Fixed in 4.0.7
- Fix · CNA Jetpack (Unknown) Fixed in 3.9.10
Timeline
- 2026-10-02 Threatist record created from CVE-2024-9926
- 2026-10-03 Alias added: GHSA-fr3h-4rcw-wvmj
References
More Automattic Jetpack vulnerabilities
- TI-2023-02806 Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API CVSS 3.1HIGH 8.8
- TI-2024-10066 Jetpack 13.0-14.0 - Unauthenticated DOM-XSS CVSS 3.1MEDIUM 6.1
- TI-2024-09340 Jetpack < 13.8, Boost < 3.4.8 - Contributor+ Stored XSS CVSS 3.1MEDIUM 5.9
- TI-2024-09339 Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution CVSS 3.1MEDIUM 5.6
- TI-2023-30606 Jetpack 11.4 - Cross Site Scripting (XSS) CVSS 4.0MEDIUM 5.1
- TI-2023-25898 WordPress Jetpack plugin < 12.7 - Contributor+ Broken Access Control vulnerability CVSS 3.1HIGH 8.8
Sources
- CVE-2024-9926 · CVE Program
- CVE-2024-9926 · NVD
- FIRST EPSS
- GHSA-fr3h-4rcw-wvmj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences