CVE-2024-10076

The Jetpack WordPress plugin (versions before 13.8 ) and the Jetpack Boost WordPress plugin (versions before 3.4.8 ) are vulnerable to Stored XSS . The root cause is the use of insecure regular expressions within the Site Accelerator features when switching image URLs to their CDN counterparts; t...

CVE-2024-6584

The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.