Jetpack

Jetpack is a security researcher credited with 3 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #1,203 of 3,866 contributors. The disclosure was published in 2026.

Their research concentrates on Deserialization Of Untrusted Data, which accounts for 2 of their findings (67%). Other recurring categories include Cross-Site Scripting. The average CVSS score across these disclosures is 6.8, peaking at 7.2. Severity breakdown: 0 critical and 1 high.

The most affected software includes Jetpack (3), across 1 distinct plugins, themes and core versions in total.

All 3 disclosed issues have since received a vendor fix.

2026

Critical

High

Medium

Low

Global Rank

#1203

of 3,866 researchers

Vulns

Critical0

High1

Medium2

Low0

Affected Assets

1plugin

Avg CVSS

6.8

Average score of vulnerabilities

Researcher Submissions

3 records


2026-09-08 00:00	Jetpack – WP Security, Backup, Speed, & Growth 16.1 - 16.1.2 - Unauthenticated Stored Cross-Site Scripting Jetpack 16.1 – 16.1.2	`N/A`	7.2 High	Jetpack	Yes
2026-09-05 00:00	Jetpack – WP Security, Backup, Speed, & Growth 16.1 - 16.1.2 - Authenticated (Administrator+) PHP Object Injection Jetpack 16.1 – 16.1.2	`N/A`	6.6 Medium	Jetpack	Yes
2026-09-05 00:00	Jetpack – WP Security, Backup, Speed, & Growth 16.1 - 16.1.2 - Authenticated (Administrator+) PHP Object Injection Jetpack 16.1 – 16.1.2	`N/A`	6.6 Medium	Jetpack	Yes

Showing 1–3 of 3 reports