CVE-2026-106601 | Automattic Jetpack Plugin up to 16.2 on WordPress password recovery

October 9, 2026 Yanac

A vulnerability was found in Automattic Jetpack Plugin up to 16.2 on WordPress. It has been classified as critical. The affected element is an unknown function. This manipulation causes weak password recovery.

This vulnerability is handled as CVE-2026-106601. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More