CVE-2026-40808: Automattic Jetpack Videopress

Medium severity, CVSS 6.5.

Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.

Affected products

• Automattic Jetpack Videopress: up to and including 3.6

Published 2026-10-10. Last modified 2026-10-10.