Vulnerabilities / Jetpack
Jetpack vulnerabilities
Advisories WPSec published for Jetpack Boost – Website Speed, Performance and Critical CSS. Other sources may list more. Its attack surface: Jetpack on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-07 | WPSEC-2026-2709 | Jetpack <= 4.8.1 - Unauthenticated Denial of Service via _jb_static Concatenation Endpoint | High 7.5 | 4.8.2 |
| 2026-11-07 | WPSEC-2026-2708 | Jetpack <= 4.8.1 - Authenticated (Subscriber+) Missing Authorization to Jetpack Connection Ownership Takeover | Medium 4.2 | 4.8.2 |
License: CC BY 4.0