CVE-2016-10706by Jeremyin Security Bulletinson Posted on January 12, 2018 The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.