Launchpad.net

CVE 2016-10705

The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.

See the CVE page on Mitre.org for more details.