Medium 5.9 2025-05-16< 3.4.8 WordPress Jetpack Boost Plugin < 3.4.8 is vulnerable to Cross Site Scripting (XSS) PatchstackCVEEUVDWordfence
Critical 9.1 2025-05-15< 3.4.7 Jetpack Boost <= 3.4.6 - Authenticated (Admin+) Server-Side Request Forgery EUVDWordfenceCVE