Jetpack Critical Security Vulnerability

jetpack

Today a critical vulnerability was found in one of the most popular and widely used WordPress plugins – Jetpack. Fortunately, according to the plugin authors there is no evidence that this issue has been used to hack real sites. However, an update of the plugin was released – Jetpack 4.0.3.

As usual, our security team was pro-active and updated our WAF (web application firewall), adding rules to prevent the hack from being used. This means that even if your plugin is not updated to the latest version, your site will still be protected. However, we urge all Jetpack users to update the plugin to its latest version in which the vulnerability is patched.

Sign Up For
More Awesome Content!

Subscribe to receive our monthly newsletters with the latest helpful content and offers from SiteGround.

Hristo Pandjarov

WordPress Innovations Director

Enthusiastic about all Open Source applications you can think of, but mostly about WordPress. Add a pinch of love for web design, new technologies, search engine optimisation and you are pretty much there!

WordPress

Share this article

Comments ( 6 )

Samuel A King

May 28, 2016

Thanks for the update guys. But now your firewall prevents me from updating my plugins, akismet from checking spam and all other jetpack functions from working. Pls advise

Hristo Pandjarov Siteground Team

May 28, 2016

I think that's another issue and it's a simple coinsidense that it happened at the same time the post was published. I've just tested again everything you mentioned and didn't experience any issues whatsoever. Please, post a ticket in your Help Desk and our support team will assist you.

Perry

Jun 03, 2016

Good to hear that the plug-in author and siteground techs are "on to it."

Thanapol Raktham

Jun 21, 2016

My site at smartfinder asia is safe despite using jetpack.

vickya4n

Jun 24, 2016

Thanks for the update guys. But now your firewall prevents me from updating my plugins, akismet from checking spam and all other jetpack functions from working.

Marina Yordanova Siteground Team

Jun 27, 2016

Hello, could you please post a ticket from your HelpDesk about this issue? Our techs will be glad to assist you further.

Start discussion

Security

Protecting WordPress Websites from Critical SQL Injection Vulnerability in WP Fastest Cache Plugin

Nov 20, 2023
8

Daniel Kanchev

Director Product Development

SiteGround CDN under attack mode security for websites

Block Sophisticated HTTP Attacks with SiteGround CDN's 'Under Attack' Mode

Oct 25, 2023
2

Daniel Kanchev

Director Product Development

Security

Response to HTTP/2 Rapid Reset: SiteGround's Swift Action Against a Novel Vulnerability

Oct 11, 2023
2

Daniel Kanchev

Director Product Development

Jetpack Critical Security Vulnerability