Jetpack – AI Agents & MCP, Security, Backup & Analytics
Jetpack – AI Agents & MCP, Security, Backup & Analytics has 33 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; all 33 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 4 high. 2026 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 16 of the records (48%). Other recurring categories include Missing Authorization, Deserialization Of Untrusted Data.
Every one of the 33 issues recorded for Jetpack – AI Agents & MCP, Security, Backup & Analytics has a vendor fix available, so running the current release closes all known holes.
15 independent researchers contributed these findings, most of them (3) reported by Jetpack. Jetpack – AI Agents & MCP, Security, Backup & Analytics is installed on roughly 3,000,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack
Read the full analysisVulnerability Records

Jetpack – AI Agents & MCP, Security, Backup & Analytics
Author
Automattic
Your WordPress site, now in the conversation Jetpack connects your WordPress site to ChatGPT, Claude, and the other AI agents you already use. Ask in plain language to draft a post, see which pages got the most views, check your backups, or run a security scan, and your agent takes care of it on your site. There’s no MCP server to set up or host. That works because Jetpack plugs your site into WordPress.com’s cloud, the same infrastructure that runs millions of sites. The heavy lifting happens there instead of on your host: backups stored off-site with one-click restores and full site migration, malware scanning, brute force protection, downtime monitoring, site analytics with Jetpack Stats, spam filtering, an image CDN, and ad-free video hosting. Plus a firewall, SEO tools, newsletters, social sharing, and forms. “All these years later, Jetpack is the iCloud for my WordPress.” Matt Mullenweg, co-founder of WordPress (review) How to get started with Jetpack Installation is free, quick, and easy. From your WordPress dashboard, add a new plugin, search for Jetpack, and install it. Activate it and connect your WordPress.com account, then open Jetpack AI in your Jetpack menu to connect your AI agent. Unlock real-time backups, one-click malware fixes, and advanced stats by upgrading to a paid plan. Need expert support? We have a global team of Happiness Engineers ready to provide incredible support. Ask your questions in the support forum or contact support. Why use Jetpack on your site Connect ChatGPT, Claude, and other AI agents Manage your site from the AI tools you already use. Connect ChatGPT or Claude in a few clicks, then ask for what you need in plain language. Your agent can work with more than your posts and pages: Jetpack also gives it your stats, backups, security scans, and newsletter, so one conversation covers your whole site. Use the AI tools you prefer. Jetpack works with ChatGPT, Codex, Claude, Claude Code, Cursor, VS Code, Continue, and any other MCP client. Ask which posts got the most views, check your backups and activity log, run a security scan, change newsletter settings, or turn on downtime monitoring. Draft posts, build a page from a single prompt, organize your Media Library, and optimize your site. Choose what your agent can read and what it can change, and turn individual tools on or off whenever you like. Your agent acts on your behalf through your WordPress.com account connection, so there’s nothing extra to host. Security, backup, and migration Jetpack Protect watches your site around the clock, and VaultPress Backup keeps a copy of everything off-site so you can undo any mistake. Login protection and basic downtime monitoring are free. Back up your site automatically in real time and restore to any point with one click. Storage starts at 10GB, with more available if you need it. Great for WooCommerce and other ecommerce stores, where every order counts. Migrate your site to a new host, clone it, or set up a test site from any backup. Scan for malware and vulnerabilities automatically, with one-click fixes. Block malicious traffic with a web application firewall (WAF), especially while attackers exploit unpatched plugins. Stop brute force attacks on your login page, and add two-factor authentication (2FA) with secure WordPress.com login. Monitor your site’s uptime and get an email alert the moment it goes down. See every change and who made it in the activity log. Block spam comments and form responses with Akismet Anti-spam. Auto-update individual plugins. Get every security feature in the Jetpack Security plan, or buy VaultPress Backup, Scan, and Akismet Anti-spam on their own. Site analytics with Jetpack Stats Get clear site statistics without being a data scientist. Watch visitors, views, likes, and comments in real time. Find your top posts and pages, and the referrers and countries that send you traffic. Measure link clicks, video plays, and file downloads. See which authors on your team write the most popular content, and where your posts get shared. Spot trends with 7-day highlights and Year in Review. Grow your audience Turn your posts into a newsletter, and offer paid subscriptions. Auto-share posts to Facebook, Instagram, LinkedIn, Threads, Bluesky, Tumblr, Mastodon, and Nextdoor. Grow traffic with SEO tools for Google, Bing, Facebook, and WordPress.com, plus an automatic XML sitemap. Collect payments and donations, or sell products, services, and memberships, with Stripe and PayPal. Build contact forms with no code and get an email for every response. Promote your posts across millions of sites in the WordPress.com and Tumblr ad network with Blaze, for a few dollars. Earn money by showing high-quality ads on your site. Keep visitors reading with related posts, and add image galleries and slideshows. Manage your site on the go with the Jetpack mobile app for iOS and Android. Write with Jetpack AI Jetpack AI works right in the WordPress editor. Give it a prompt and it drafts posts, pages, lists, and tables, then helps you edit and translate them. Write a first draft from a prompt without leaving the editor. Change the tone, fix spelling and grammar, or make text shorter or longer. Translate your content into many languages. Speed and performance Serve images and static files like CSS and JavaScript from our global CDN instead of your server, which saves bandwidth and speeds up your site on mobile. Host video with no ads and no recommendations that lead visitors off your site. Help visitors find what they need with fast, customizable site search, including product filters for WooCommerce stores. Pair Jetpack with Jetpack Boost for page caching and better Core Web Vitals. Integrations Jetpack is updated monthly to work with the plugins and services you already use. WooCommerce: Jetpack and WooCommerce are both made by Automattic, so Backup, Scan, Stats, and Anti-spam work with your store out of the box. Social networks: Facebook, Instagram, LinkedIn, Threads, Bluesky, Tumblr, Mastodon, and Nextdoor. Payments: Stripe and PayPal. Email marketing: Mailchimp. Anti-spam (powered by Akismet) for Jetpack Forms, Contact Form 7, Ninja Forms, Gravity Forms, Formidable Forms, and more. Caching: works with WP Super Cache and Cloudflare. Blocks for Calendly, Pinterest, WhatsApp, Eventbrite, OpenTable, podcasts, maps, and GIFs. Plans and products Jetpack Complete – Everything Jetpack offers: real-time security, top performance, and growth tools in one plan. Jetpack Security – Real-time backups, a web application firewall, malware scanning, and spam protection. VaultPress Backup – Save every change and get back online quickly with one-click restores. Jetpack Scan – Automated malware scanning and a web application firewall, with one-click fixes. Jetpack AI – Write, edit, and translate in the editor. Jetpack Stats – Track visits, popular posts, newsletter subscribers, and more. Jetpack Social – Share your posts to every major social network from one place. Jetpack Newsletter – Turn posts into newsletters and earn from paid subscriptions. Jetpack Growth – Grow your audience with Stats, Social, newsletters, paid content, and ads. Jetpack Search – Instant, relevant results for your visitors, with no ads and no tracking. Jetpack VideoPress – Ad-free video, uploaded right from the editor. Jetpack Boost – Make your site faster, no developer required. Jetpack CRM – Manage customers, leads, and invoices in WordPress. Akismet Anti-spam – Clear spam from comments and forms automatically. Blaze – Promote your posts across millions of sites. Jetpack Manage – Monitor security, performance, and traffic across all your sites from one dashboard. Install only what you need Each of these is also available as its own plugin: Jetpack VaultPress Backup Jetpack Protect Jetpack Boost Jetpack Stats Jetpack Social Jetpack Search Jetpack VideoPress Jetpack CRM Akismet Anti-spam
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C