WordPress Plugin Vulnerabilities
Jetpack < 16.1.3 - Reflected XSS
Description
The plugin does not sanitize some parameters before outputting them in the Reader editor, leading to a Reflected XSS issue.
Proof of Concept
Affects Plugins
Fixed in 16.1.3
Fixed in 16.0.2
Fixed in 15.9.2
Fixed in 15.8.1
Fixed in 15.7.2
Fixed in 15.6.1
Fixed in 15.5.1
Fixed in 15.4.1
Fixed in 15.3.2
Fixed in 15.2.1
Fixed in 15.1.2
Fixed in 15.0.3
Fixed in 14.9.2
Fixed in 14.8.1
Fixed in 14.7.1
Fixed in 14.6.1
Fixed in 14.5.1 References
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Daniel Wade
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2026-09-07 (about 1 month ago)
Added
2026-09-07 (about 1 month ago)
Last Updated
2026-10-16 (about 8 hours ago)
