How many Automattic jetpack CVEs are in CISA KEV?

None of Automattic jetpack's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Automattic jetpack are affected?

2,275 distinct Automattic jetpack versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Automattic jetpack CVEs?

Automattic jetpack's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).

How many critical Automattic jetpack vulnerabilities are there?

Automattic jetpack has 1 critical and 4 high-severity CVEs.

What is the average severity of Automattic jetpack CVEs?

The average CVSS base score across Automattic jetpack's scored CVEs is 6.5.

Automattic jetpack Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Automattic jetpack has 18 published CVE records since 2011, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 11 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Automattic jetpack, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include wordpress.

Severity and exploitation

How the CVSS severity of Automattic jetpack's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium13

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Automattic jetpack's CVEs are currently listed in CISA's KEV catalog.

Public exploits

11 of Automattic jetpack's CVEs have a known public exploit available.

Frequently asked questions

Common questions about Automattic jetpack vulnerabilities.

How many CVEs does Automattic jetpack have?: Automattic jetpack has 18 published CVE records since 2011.
How many Automattic jetpack CVEs are in CISA KEV?: None of Automattic jetpack's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Automattic jetpack vulnerabilities?: Yes — 11 of Automattic jetpack's CVEs have a known public exploit.
Which versions of Automattic jetpack are affected?: 2,275 distinct Automattic jetpack versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Automattic jetpack CVEs?: Automattic jetpack's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-264, CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization).
How many critical Automattic jetpack vulnerabilities are there?: Automattic jetpack has 1 critical and 4 high-severity CVEs.
What is the average severity of Automattic jetpack CVEs?: The average CVSS base score across Automattic jetpack's scored CVEs is 6.5.

Automattic jetpack Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Common weakness types

Disclosure activity by year

Other Automattic products

Frequently asked questions

References

Track Automattic jetpack vulnerabilities

Version ranges

Fixed in