Login Request a demo
JC
Product
Jetpack CRM
by Automattic · last CVE Feb 20, 2026
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jetpack CRM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3342
8.8
1%
Oct 20
Jetpack CRM <= 5.3.1 - Cross-Site Request Forgery and PHAR Deserialization
Affected: through 5.3.1
CVE-2026-22356
7.5
1%
Feb 20
WordPress Jetpack CRM plugin <= 6.7.0 - Local File Inclusion vulnerability
Affected: through 6.7.0
CVE-2022-4497
5.4
1%
Jan 9
The Jetpack CRM WordPress plugin before 5.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a…
Affected: before 5.5.0
CVE-2023-27429
4.8
0%
Jun 21
WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)
Affected: before 5.5.0
CVE-2022-3919
4.8
0%
Dec 12
The Jetpack CRM WordPress plugin before 5.4.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even…
Affected: before 5.4.3
Showing 5