slim_jetpack vulnerabilities

CVEs whose affected-version data names the slim_jetpack package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-115498High· 7.2

4d ago

Slim Jetpack <= 2.7.0.1 - Unauthenticated Stored Cross-Site Scripting via Contact Form 'Website' Field

The Slim Jetpack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'g<PAGE_ID>-website (Website contact-field)' parameter in all versions up to, and including, 2.7.0.1 due to insufficient input sanitization and ou…

▾ Twilightwingerspeed · Slim JetpackEPSS 0.32%via CVEORG