Launchpad.net

CVE 2016-10706

The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.

See the CVE page on Mitre.org for more details.