Jetpack@* Security Vulnerabilities and Issues — Jetpack@* CVE List

Lucene search

AutomatticJetpack*

4 matches found

CVE•added 2024/11/07 3:15 p.m.•80 views

CVE-2024-9926

The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form

4.3CVSS4.9AI score0.34244EPSS

CVE•added 2024/04/24 4:15 p.m.•62 views

CVE-2023-47774

Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7.

5.4CVSS6.8AI score0.00044EPSS

CVE•added 2024/06/19 11:15 a.m.•51 views

CVE-2023-47788

Missing Authorization vulnerability in Automattic Jetpack.This issue affects Jetpack: from n/a before 12.7.

4.3CVSS4.6AI score0.00155EPSS

CVE•added 2024/12/25 6:15 a.m.•38 views

CVE-2024-10858

The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com.

6.1CVSS6.5AI score0.00036EPSS