Plugin icon

Jetpack CRM – Clients, Leads, Invoices, Billing, Email Marketing, & Automation

zero-bs-crm

Vulnerabilities:

8

Last Updated:

May 13, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-02-16
Title
Jetpack CRM < 6.7.1 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 6.7.1
CVSS
8.1 (high)
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - CRM Admin+ XSS
Fixed in
Fixed in 5.5.1
CVSS
3.5 (low)
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - Client+ XSS
Fixed in
Fixed in 5.5.1
CVSS
6.8 (medium)
Published
2023-04-18
Title
Jetpack CRM < 5.4.0 - PHAR Deserialisation via CSRF
Fixed in
Fixed in 5.4.0
CVSS
7.5 (high)
Published
2023-03-05
Title
Jetpack CRM < 5.5.0 - Admin+ Stored XSS
Fixed in
Fixed in 5.5.0
CVSS
3.5 (low)
Published
2022-12-19
Title
Jetpack CRM < 5.5 - Contributor+ Stored XSS
Fixed in
Fixed in 5.5
CVSS
6.8 (medium)
Published
2022-11-21
Title
Jetpack CRM < 5.4.3 - Admin+ Cross-Site Scripting
Fixed in
Fixed in 5.4.3
CVSS
3.4 (low)
Published
2021-09-14
Title
Jetpack CRM WooCommerce Connect < 2.13 - Unauthorized Invoice Disclosure
Fixed in
Fixed in 4.2.4
CVSS
3.7 (low)