Jetpack

Vulnerability Records

25 records


2024-12-04 00:00	Jetpack 13.0 - 14.0 - Reflected DOM-based Cross-Site Scripting Jetpack 13.0 – 14.0	`CVE-2024-10858`	6.1 Medium	Eldar	Yes
2024-10-17 00:00	Jetpack <= 13.7 - Unauthenticated Arbitrary Block & Shortcode Execution Jetpack <= 13.7	`CVE-2024-10075`	6.5 Medium	Marc-Alexandre Montpas	Yes
2024-10-17 00:00	Jetpack <= 13.7 & Jetpack Boost <= 3.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Jetpack <= 13.7	`CVE-2024-10076`	6.4 Medium	Marc-Alexandre Montpas	Yes
2024-10-14 00:00	Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure Jetpack 3.9 – 13.9 · 101 branches	`CVE-2024-9926`	4.3 Medium	Anonymous	Yes
2024-05-13 20:29	Jetpack – WP Security, Backup, Speed, & Growth <= 13.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpvideo Shortcode Jetpack <= 13.3.1	`CVE-2024-4392`	6.4 Medium	wesley (wcraft)	Yes
2023-11-16 00:00	Jetpack <= 12.6.2 - Improper Authorization via WPCom External Media REST endpoints Jetpack < 12.7	`CVE-2023-47788`	4.3 Medium	Rafie Muhammad	Yes
2023-11-16 00:00	Jetpack <= 12.8-a.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute Jetpack <= 12.8-a.1	`CVE-2023-45050`	6.4 Medium	Rafie Muhammad	Yes
2023-11-16 00:00	Jetpack < 12.7 - Authenticated(Contributor+) Clickjacking via Iframe Injection Jetpack < 12.7	`CVE-2023-47774`	5.0 Medium	Rafie Muhammad	Yes
2023-05-30 00:00	Jetpack <= 12.1 - Authenticated (Author+) Arbitrary File Manipulation Jetpack 2.0 – 12.1 · 102 branches	`CVE-2023-2996`	6.5 Medium	Miguel Neto	Yes
2021-06-01 00:00	JetPack <= 9.7 - Information Disclosure Jetpack 2.0 – < 9.7.1 · 78 branches	`CVE-2021-24374`	5.3 Medium	Anonymous	Yes

Showing 1–10 of 25 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C