jetpack
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 14, 2024 to present
5
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
43/100
medium
Severity Distribution
Critical
1High
0Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
2Age Distribution
Common Weaknesses (CWE)
1
XSS
3
2
SSRF
1
Most Affected Products
1. Automattic Jetpack Wordpress12
2. Jetpack Better Follow Button1
3. Antonpug Better Flow Button For Jetpack Wordpress1
4. Jetpack Jetpack Boost1
5. Automattic Jetpack Boost Wordpress1
Recent Vulnerabilities
See more →CVE-2023-7168
CVSS 4.8medium
Better Follow Button for Jetpack <= 8.0 - Admin+ Stored XSS
5/15/2025🔧 No Patch
CVE-2024-6584
CVSS 9.1critical
Jetpack Boost < 3.4.7 - Admin+ SSRF
5/15/2025🔧 No Patch
CVE-2024-10858
CVSS 6.1medium
Jetpack 13.0-14.0 - Unauthenticated DOM-XSS
12/25/2024🔧 No Patch
CVE-2024-9926
CVSS 4.3EPSS 0%medium
Jetpack < 13.9.1 - Subscriber+ Arbitrary Feedback Access
11/7/2024🔧 No Patch
CVE-2024-4392
CVSS 6.4EPSS 0%medium
Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode
5/14/2024🔧 No Patch
Monitor jetpack in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.