Vulnerabilites related to Unknown - Jetpack
CVE-2024-9926 (GCVE-0-2024-9926)
Vulnerability from cvelistv5
Published
2024-11-07 15:02
Modified
2024-11-07 19:53
Summary
The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form
References
https://wpscan.com/vulnerability/669382af-f836-4896-bdcb-5c6a57c99bd9/exploit, vdb-entry, technical-description
Impacted products
Vendor Product Version
Unknown Jetpack Version: 13.9   
Create a notification for this product.
   Unknown Jetpack Version: 13.8   
Create a notification for this product.
   Unknown Jetpack Version: 13.7   
Create a notification for this product.
   Unknown Jetpack Version: 13.6   
Create a notification for this product.
   Unknown Jetpack Version: 13.5   
Create a notification for this product.
   Unknown Jetpack Version: 13.4   
Create a notification for this product.
   Unknown Jetpack Version: 13.3   
Create a notification for this product.
   Unknown Jetpack Version: 13.2   
Create a notification for this product.
   Unknown Jetpack Version: 13.1   
Create a notification for this product.
   Unknown Jetpack Version: 13.0   
Create a notification for this product.
   Unknown Jetpack Version: 12.9   
Create a notification for this product.
   Unknown Jetpack Version: 12.8   
Create a notification for this product.
   Unknown Jetpack Version: 12.7   
Create a notification for this product.
   Unknown Jetpack Version: 12.6   
Create a notification for this product.
   Unknown Jetpack Version: 12.5   
Create a notification for this product.
   Unknown Jetpack Version: 12.4   
Create a notification for this product.
   Unknown Jetpack Version: 12.3   
Create a notification for this product.
   Unknown Jetpack Version: 12.2   
Create a notification for this product.
   Unknown Jetpack Version: 12.1   
Create a notification for this product.
   Unknown Jetpack Version: 12.0   
Create a notification for this product.
   Unknown Jetpack Version: 11.9   
Create a notification for this product.
   Unknown Jetpack Version: 11.8   
Create a notification for this product.
   Unknown Jetpack Version: 11.7   
Create a notification for this product.
   Unknown Jetpack Version: 11.6   
Create a notification for this product.
   Unknown Jetpack Version: 11.5   
Create a notification for this product.
   Unknown Jetpack Version: 11.4   
Create a notification for this product.
   Unknown Jetpack Version: 11.3   
Create a notification for this product.
   Unknown Jetpack Version: 11.2   
Create a notification for this product.
   Unknown Jetpack Version: 11.1   
Create a notification for this product.
   Unknown Jetpack Version: 11.0   
Create a notification for this product.
   Unknown Jetpack Version: 10.9   
Create a notification for this product.
   Unknown Jetpack Version: 10.8   
Create a notification for this product.
   Unknown Jetpack Version: 10.7   
Create a notification for this product.
   Unknown Jetpack Version: 10.6   
Create a notification for this product.
   Unknown Jetpack Version: 10.5   
Create a notification for this product.
   Unknown Jetpack Version: 10.4   
Create a notification for this product.
   Unknown Jetpack Version: 10.3   
Create a notification for this product.
   Unknown Jetpack Version: 10.2   
Create a notification for this product.
   Unknown Jetpack Version: 10.1   
Create a notification for this product.
   Unknown Jetpack Version: 10.0   
Create a notification for this product.
   Unknown Jetpack Version: 9.9   
Create a notification for this product.
   Unknown Jetpack Version: 9.8   
Create a notification for this product.
   Unknown Jetpack Version: 9.7   
Create a notification for this product.
   Unknown Jetpack Version: 9.6   
Create a notification for this product.
   Unknown Jetpack Version: 9.5   
Create a notification for this product.
   Unknown Jetpack Version: 9.4   
Create a notification for this product.
   Unknown Jetpack Version: 9.3   
Create a notification for this product.
   Unknown Jetpack Version: 9.2   
Create a notification for this product.
   Unknown Jetpack Version: 9.1   
Create a notification for this product.
   Unknown Jetpack Version: 9.0   
Create a notification for this product.
   Unknown Jetpack Version: 8.9   
Create a notification for this product.
   Unknown Jetpack Version: 8.8   
Create a notification for this product.
   Unknown Jetpack Version: 8.7   
Create a notification for this product.
   Unknown Jetpack Version: 8.6   
Create a notification for this product.
   Unknown Jetpack Version: 8.5   
Create a notification for this product.
   Unknown Jetpack Version: 8.4   
Create a notification for this product.
   Unknown Jetpack Version: 8.3   
Create a notification for this product.
   Unknown Jetpack Version: 8.2   
Create a notification for this product.
   Unknown Jetpack Version: 8.1   
Create a notification for this product.
   Unknown Jetpack Version: 8.0   
Create a notification for this product.
   Unknown Jetpack Version: 7.9   
Create a notification for this product.
   Unknown Jetpack Version: 7.8   
Create a notification for this product.
   Unknown Jetpack Version: 7.7   
Create a notification for this product.
   Unknown Jetpack Version: 7.6   
Create a notification for this product.
   Unknown Jetpack Version: 7.5   
Create a notification for this product.
   Unknown Jetpack Version: 7.4   
Create a notification for this product.
   Unknown Jetpack Version: 7.3   
Create a notification for this product.
   Unknown Jetpack Version: 7.2   
Create a notification for this product.
   Unknown Jetpack Version: 7.1   
Create a notification for this product.
   Unknown Jetpack Version: 7.0   
Create a notification for this product.
   Unknown Jetpack Version: 6.9   
Create a notification for this product.
   Unknown Jetpack Version: 6.8   
Create a notification for this product.
   Unknown Jetpack Version: 6.7   
Create a notification for this product.
   Unknown Jetpack Version: 6.6   
Create a notification for this product.
   Unknown Jetpack Version: 6.5   
Create a notification for this product.
   Unknown Jetpack Version: 6.4   
Create a notification for this product.
   Unknown Jetpack Version: 6.3   
Create a notification for this product.
   Unknown Jetpack Version: 6.2   
Create a notification for this product.
   Unknown Jetpack Version: 6.1   
Create a notification for this product.
   Unknown Jetpack Version: 6.0   
Create a notification for this product.
   Unknown Jetpack Version: 5.9   
Create a notification for this product.
   Unknown Jetpack Version: 5.8   
Create a notification for this product.
   Unknown Jetpack Version: 5.7   
Create a notification for this product.
   Unknown Jetpack Version: 5.6   
Create a notification for this product.
   Unknown Jetpack Version: 5.5   
Create a notification for this product.
   Unknown Jetpack Version: 5.4   
Create a notification for this product.
   Unknown Jetpack Version: 5.3   
Create a notification for this product.
   Unknown Jetpack Version: 5.2   
Create a notification for this product.
   Unknown Jetpack Version: 5.1   
Create a notification for this product.
   Unknown Jetpack Version: 5.0   
Create a notification for this product.
   Unknown Jetpack Version: 4.9   
Create a notification for this product.
   Unknown Jetpack Version: 4.8   
Create a notification for this product.
   Unknown Jetpack Version: 4.7   
Create a notification for this product.
   Unknown Jetpack Version: 4.6   
Create a notification for this product.
   Unknown Jetpack Version: 4.5   
Create a notification for this product.
   Unknown Jetpack Version: 4.4   
Create a notification for this product.
   Unknown Jetpack Version: 4.3   
Create a notification for this product.
   Unknown Jetpack Version: 4.2   
Create a notification for this product.
   Unknown Jetpack Version: 4.1.0   
Create a notification for this product.
   Unknown Jetpack Version: 4.0.0   
Create a notification for this product.
   Unknown Jetpack Version: 3.9.2   
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "jetpack",
            "vendor": "automattic",
            "versions": [
              {
                "lessThan": "13.9.1",
                "status": "affected",
                "version": "13.9",
                "versionType": "semver"
              },
              {
                "lessThan": "13.8.2",
                "status": "affected",
                "version": "13.8",
                "versionType": "semver"
              },
              {
                "lessThan": "13.7.1",
                "status": "affected",
                "version": "13.7",
                "versionType": "semver"
              },
              {
                "lessThan": "13.6.1",
                "status": "affected",
                "version": "13.6",
                "versionType": "semver"
              },
              {
                "lessThan": "13.5.1",
                "status": "affected",
                "version": "13.5",
                "versionType": "semver"
              },
              {
                "lessThan": "13.4.4",
                "status": "affected",
                "version": "13.4",
                "versionType": "semver"
              },
              {
                "lessThan": "13.3.2",
                "status": "affected",
                "version": "13.3",
                "versionType": "semver"
              },
              {
                "lessThan": "13.2.3",
                "status": "affected",
                "version": "13.2",
                "versionType": "semver"
              },
              {
                "lessThan": "13.1.4",
                "status": "affected",
                "version": "13.1",
                "versionType": "semver"
              },
              {
                "lessThan": "13.0.1",
                "status": "affected",
                "version": "13.0",
                "versionType": "semver"
              },
              {
                "lessThan": "12.9.4",
                "status": "affected",
                "version": "12.9",
                "versionType": "semver"
              },
              {
                "lessThan": "12.8.2",
                "status": "affected",
                "version": "12.8",
                "versionType": "semver"
              },
              {
                "lessThan": "12.7.2",
                "status": "affected",
                "version": "12.7",
                "versionType": "semver"
              },
              {
                "lessThan": "12.6.3",
                "status": "affected",
                "version": "12.6",
                "versionType": "semver"
              },
              {
                "lessThan": "12.5.1",
                "status": "affected",
                "version": "12.5",
                "versionType": "semver"
              },
              {
                "lessThan": "12.4.1",
                "status": "affected",
                "version": "12.4",
                "versionType": "semver"
              },
              {
                "lessThan": "12.3.1",
                "status": "affected",
                "version": "12.3",
                "versionType": "semver"
              },
              {
                "lessThan": "12.2.2",
                "status": "affected",
                "version": "12.2",
                "versionType": "semver"
              },
              {
                "lessThan": "12.1.2",
                "status": "affected",
                "version": "12.1",
                "versionType": "semver"
              },
              {
                "lessThan": "12.0.2",
                "status": "affected",
                "version": "12.0",
                "versionType": "semver"
              },
              {
                "lessThan": "11.9.3",
                "status": "affected",
                "version": "11.9",
                "versionType": "semver"
              },
              {
                "lessThan": "11.8.6",
                "status": "affected",
                "version": "11.8",
                "versionType": "semver"
              },
              {
                "lessThan": "11.7.3",
                "status": "affected",
                "version": "11.7",
                "versionType": "semver"
              },
              {
                "lessThan": "11.6.2",
                "status": "affected",
                "version": "11.6",
                "versionType": "semver"
              },
              {
                "lessThan": "11.5.3",
                "status": "affected",
                "version": "11.5",
                "versionType": "semver"
              },
              {
                "lessThan": "11.4.2",
                "status": "affected",
                "version": "11.4",
                "versionType": "semver"
              },
              {
                "lessThan": "11.3.4",
                "status": "affected",
                "version": "11.3",
                "versionType": "semver"
              },
              {
                "lessThan": "11.2.2",
                "status": "affected",
                "version": "11.2",
                "versionType": "semver"
              },
              {
                "lessThan": "11.1.4",
                "status": "affected",
                "version": "11.1",
                "versionType": "semver"
              },
              {
                "lessThan": "11.0.2",
                "status": "affected",
                "version": "11.0",
                "versionType": "semver"
              },
              {
                "lessThan": "10.9.3",
                "status": "affected",
                "version": "10.9",
                "versionType": "semver"
              },
              {
                "lessThan": "10.8.2",
                "status": "affected",
                "version": "10.8",
                "versionType": "semver"
              },
              {
                "lessThan": "10.7.2",
                "status": "affected",
                "version": "10.7",
                "versionType": "semver"
              },
              {
                "lessThan": "10.6.2",
                "status": "affected",
                "version": "10.6",
                "versionType": "semver"
              },
              {
                "lessThan": "10.5.3",
                "status": "affected",
                "version": "10.5",
                "versionType": "semver"
              },
              {
                "lessThan": "10.4.2",
                "status": "affected",
                "version": "10.4",
                "versionType": "semver"
              },
              {
                "lessThan": "10.3.2",
                "status": "affected",
                "version": "10.3",
                "versionType": "semver"
              },
              {
                "lessThan": "10.2.3",
                "status": "affected",
                "version": "10.2",
                "versionType": "semver"
              },
              {
                "lessThan": "10.1.2",
                "status": "affected",
                "version": "10.1",
                "versionType": "semver"
              },
              {
                "lessThan": "10.0.2",
                "status": "affected",
                "version": "10.0",
                "versionType": "semver"
              },
              {
                "lessThan": "9.9.3",
                "status": "affected",
                "version": "9.9",
                "versionType": "semver"
              },
              {
                "lessThan": "9.8.3",
                "status": "affected",
                "version": "9.8",
                "versionType": "semver"
              },
              {
                "lessThan": "9.7.3",
                "status": "affected",
                "version": "9.7",
                "versionType": "semver"
              },
              {
                "lessThan": "9.6.4",
                "status": "affected",
                "version": "9.6",
                "versionType": "semver"
              },
              {
                "lessThan": "9.5.5",
                "status": "affected",
                "version": "9.5",
                "versionType": "semver"
              },
              {
                "lessThanOrEqual": "9.4.4",
                "status": "affected",
                "version": "9.4",
                "versionType": "semver"
              },
              {
                "lessThan": "9.3.5",
                "status": "affected",
                "version": "9.3",
                "versionType": "semver"
              },
              {
                "lessThan": "9.2.4",
                "status": "affected",
                "version": "9.2",
                "versionType": "semver"
              },
              {
                "lessThan": "9.1.3",
                "status": "affected",
                "version": "9.1",
                "versionType": "semver"
              },
              {
                "lessThan": "9.0.5",
                "status": "affected",
                "version": "9.0",
                "versionType": "semver"
              },
              {
                "lessThan": "8.9.4",
                "status": "affected",
                "version": "8.9",
                "versionType": "semver"
              },
              {
                "lessThan": "8.8.5",
                "status": "affected",
                "version": "8.8",
                "versionType": "semver"
              },
              {
                "lessThan": "8.7.4",
                "status": "affected",
                "version": "8.7",
                "versionType": "semver"
              },
              {
                "lessThan": "8.6.4",
                "status": "affected",
                "version": "8.6",
                "versionType": "semver"
              },
              {
                "lessThan": "8.5.3",
                "status": "affected",
                "version": "8.5",
                "versionType": "semver"
              },
              {
                "lessThan": "8.4.5",
                "status": "affected",
                "version": "8.4",
                "versionType": "semver"
              },
              {
                "lessThan": "8.3.3",
                "status": "affected",
                "version": "8.3",
                "versionType": "semver"
              },
              {
                "lessThan": "8.2.6",
                "status": "affected",
                "version": "8.2",
                "versionType": "semver"
              },
              {
                "lessThan": "8.1.4",
                "status": "affected",
                "version": "8.1",
                "versionType": "semver"
              },
              {
                "lessThan": "8.0.3",
                "status": "affected",
                "version": "8.0",
                "versionType": "semver"
              },
              {
                "lessThan": "7.9.4",
                "status": "affected",
                "version": "7.9",
                "versionType": "semver"
              },
              {
                "lessThan": "7.8.4",
                "status": "affected",
                "version": "7.8",
                "versionType": "semver"
              },
              {
                "lessThan": "7.7.6",
                "status": "affected",
                "version": "7.7",
                "versionType": "semver"
              },
              {
                "lessThan": "7.6.4",
                "status": "affected",
                "version": "7.6",
                "versionType": "semver"
              },
              {
                "lessThan": "7.5.7",
                "status": "affected",
                "version": "7.5",
                "versionType": "semver"
              },
              {
                "lessThan": "7.4.5",
                "status": "affected",
                "version": "7.4",
                "versionType": "semver"
              },
              {
                "lessThan": "7.3.5",
                "status": "affected",
                "version": "7.3",
                "versionType": "semver"
              },
              {
                "lessThan": "7.2.5",
                "status": "affected",
                "version": "7.2",
                "versionType": "semver"
              },
              {
                "lessThan": "7.1.5",
                "status": "affected",
                "version": "7.1",
                "versionType": "semver"
              },
              {
                "lessThan": "7.0.5",
                "status": "affected",
                "version": "7.0",
                "versionType": "semver"
              },
              {
                "lessThan": "6.9.4",
                "status": "affected",
                "version": "6.9",
                "versionType": "semver"
              },
              {
                "lessThan": "6.8.5",
                "status": "affected",
                "version": "6.8",
                "versionType": "semver"
              },
              {
                "lessThan": "6.7.4",
                "status": "affected",
                "version": "6.7",
                "versionType": "semver"
              },
              {
                "lessThan": "6.6.5",
                "status": "affected",
                "version": "6.6",
                "versionType": "semver"
              },
              {
                "lessThan": "6.5.4",
                "status": "affected",
                "version": "6.5",
                "versionType": "semver"
              },
              {
                "lessThan": "6.4.6",
                "status": "affected",
                "version": "6.4",
                "versionType": "semver"
              },
              {
                "lessThan": "6.3.7",
                "status": "affected",
                "version": "6.3",
                "versionType": "semver"
              },
              {
                "lessThan": "6.2.5",
                "status": "affected",
                "version": "6.2",
                "versionType": "semver"
              },
              {
                "lessThan": "6.1.5",
                "status": "affected",
                "version": "6.1",
                "versionType": "semver"
              },
              {
                "lessThan": "6.0.4",
                "status": "affected",
                "version": "6.0",
                "versionType": "semver"
              },
              {
                "lessThan": "5.9.4",
                "status": "affected",
                "version": "5.9",
                "versionType": "semver"
              },
              {
                "lessThan": "5.8.4",
                "status": "affected",
                "version": "5.8",
                "versionType": "semver"
              },
              {
                "lessThan": "5.7.5",
                "status": "affected",
                "version": "5.7",
                "versionType": "semver"
              },
              {
                "lessThan": "5.6.5",
                "status": "affected",
                "version": "5.6",
                "versionType": "semver"
              },
              {
                "lessThan": "5.5.5",
                "status": "affected",
                "version": "5.5",
                "versionType": "semver"
              },
              {
                "lessThan": "5.4.4",
                "status": "affected",
                "version": "5.4",
                "versionType": "semver"
              },
              {
                "lessThan": "5.3.4",
                "status": "affected",
                "version": "5.3",
                "versionType": "semver"
              },
              {
                "lessThan": "5.2.5",
                "status": "affected",
                "version": "5.2",
                "versionType": "semver"
              },
              {
                "lessThan": "5.1.4",
                "status": "affected",
                "version": "5.1",
                "versionType": "semver"
              },
              {
                "lessThan": "5.0.3",
                "status": "affected",
                "version": "5.0",
                "versionType": "semver"
              },
              {
                "lessThan": "4.9.3",
                "status": "affected",
                "version": "4.9",
                "versionType": "semver"
              },
              {
                "lessThan": "4.8.5",
                "status": "affected",
                "version": "4.8",
                "versionType": "semver"
              },
              {
                "lessThan": "4.7.4",
                "status": "affected",
                "version": "4.7",
                "versionType": "semver"
              },
              {
                "lessThan": "4.6.3",
                "status": "affected",
                "version": "4.6",
                "versionType": "semver"
              },
              {
                "lessThan": "4.5.3",
                "status": "affected",
                "version": "4.5",
                "versionType": "semver"
              },
              {
                "lessThan": "4.4.5",
                "status": "affected",
                "version": "4.4",
                "versionType": "semver"
              },
              {
                "lessThan": "4.3.5",
                "status": "affected",
                "version": "4.3",
                "versionType": "semver"
              },
              {
                "lessThan": "4.2.5",
                "status": "affected",
                "version": "4.2",
                "versionType": "semver"
              },
              {
                "lessThan": "4.1.4",
                "status": "affected",
                "version": "4.1.0",
                "versionType": "semver"
              },
              {
                "lessThan": "4.0.7",
                "status": "affected",
                "version": "4.0.0",
                "versionType": "semver"
              },
              {
                "lessThan": "3.9.10",
                "status": "affected",
                "version": "3.9.2",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-9926",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-07T18:35:48.550122Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T19:53:07.815Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.9.1",
              "status": "affected",
              "version": "13.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.8.2",
              "status": "affected",
              "version": "13.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.7.1",
              "status": "affected",
              "version": "13.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.6.1",
              "status": "affected",
              "version": "13.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.5.1",
              "status": "affected",
              "version": "13.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.4.4",
              "status": "affected",
              "version": "13.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.3.2",
              "status": "affected",
              "version": "13.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.2.3",
              "status": "affected",
              "version": "13.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.1.4",
              "status": "affected",
              "version": "13.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.0.1",
              "status": "affected",
              "version": "13.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.9.4",
              "status": "affected",
              "version": "12.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.8.2",
              "status": "affected",
              "version": "12.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.7.2",
              "status": "affected",
              "version": "12.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.6.3",
              "status": "affected",
              "version": "12.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.5.1",
              "status": "affected",
              "version": "12.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.4.1",
              "status": "affected",
              "version": "12.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.3.1",
              "status": "affected",
              "version": "12.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.2.2",
              "status": "affected",
              "version": "12.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.1.2",
              "status": "affected",
              "version": "12.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "12.0.2",
              "status": "affected",
              "version": "12.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.9.3",
              "status": "affected",
              "version": "11.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.8.6",
              "status": "affected",
              "version": "11.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.7.3",
              "status": "affected",
              "version": "11.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.6.2",
              "status": "affected",
              "version": "11.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.5.3",
              "status": "affected",
              "version": "11.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.4.2",
              "status": "affected",
              "version": "11.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.3.4",
              "status": "affected",
              "version": "11.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.2.2",
              "status": "affected",
              "version": "11.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.1.4",
              "status": "affected",
              "version": "11.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "11.0.2",
              "status": "affected",
              "version": "11.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.9.3",
              "status": "affected",
              "version": "10.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.8.2",
              "status": "affected",
              "version": "10.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.7.2",
              "status": "affected",
              "version": "10.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.6.2",
              "status": "affected",
              "version": "10.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.5.3",
              "status": "affected",
              "version": "10.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.4.2",
              "status": "affected",
              "version": "10.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.3.2",
              "status": "affected",
              "version": "10.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.2.3",
              "status": "affected",
              "version": "10.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.1.2",
              "status": "affected",
              "version": "10.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "10.0.2",
              "status": "affected",
              "version": "10.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.9.3",
              "status": "affected",
              "version": "9.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.8.3",
              "status": "affected",
              "version": "9.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.7.3",
              "status": "affected",
              "version": "9.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.6.4",
              "status": "affected",
              "version": "9.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.5.5",
              "status": "affected",
              "version": "9.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.4.4",
              "status": "affected",
              "version": "9.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.3.5",
              "status": "affected",
              "version": "9.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.2.4",
              "status": "affected",
              "version": "9.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.1.3",
              "status": "affected",
              "version": "9.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "9.0.5",
              "status": "affected",
              "version": "9.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.9.4",
              "status": "affected",
              "version": "8.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.8.5",
              "status": "affected",
              "version": "8.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.7.4",
              "status": "affected",
              "version": "8.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.6.4",
              "status": "affected",
              "version": "8.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.5.3",
              "status": "affected",
              "version": "8.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.4.5",
              "status": "affected",
              "version": "8.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.3.3",
              "status": "affected",
              "version": "8.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.2.6",
              "status": "affected",
              "version": "8.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.1.4",
              "status": "affected",
              "version": "8.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "8.0.3",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.9.4",
              "status": "affected",
              "version": "7.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.8.4",
              "status": "affected",
              "version": "7.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.7.6",
              "status": "affected",
              "version": "7.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.6.4",
              "status": "affected",
              "version": "7.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.5.7",
              "status": "affected",
              "version": "7.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.4.5",
              "status": "affected",
              "version": "7.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.3.5",
              "status": "affected",
              "version": "7.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.2.5",
              "status": "affected",
              "version": "7.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.1.5",
              "status": "affected",
              "version": "7.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "7.0.5",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.9.4",
              "status": "affected",
              "version": "6.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.8.5",
              "status": "affected",
              "version": "6.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.7.4",
              "status": "affected",
              "version": "6.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.6.5",
              "status": "affected",
              "version": "6.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.5.4",
              "status": "affected",
              "version": "6.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.4.6",
              "status": "affected",
              "version": "6.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.3.7",
              "status": "affected",
              "version": "6.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.2.5",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.1.5",
              "status": "affected",
              "version": "6.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "6.0.4",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.9.4",
              "status": "affected",
              "version": "5.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.8.4",
              "status": "affected",
              "version": "5.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.7.5",
              "status": "affected",
              "version": "5.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.6.5",
              "status": "affected",
              "version": "5.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.5.5",
              "status": "affected",
              "version": "5.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.4.4",
              "status": "affected",
              "version": "5.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.3.4",
              "status": "affected",
              "version": "5.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.2.5",
              "status": "affected",
              "version": "5.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.1.4",
              "status": "affected",
              "version": "5.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "5.0.3",
              "status": "affected",
              "version": "5.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.9.3",
              "status": "affected",
              "version": "4.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.8.5",
              "status": "affected",
              "version": "4.8",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.7.4",
              "status": "affected",
              "version": "4.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.6.3",
              "status": "affected",
              "version": "4.6",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.5.3",
              "status": "affected",
              "version": "4.5",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.4.5",
              "status": "affected",
              "version": "4.4",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.3.5",
              "status": "affected",
              "version": "4.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.2.5",
              "status": "affected",
              "version": "4.2",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.1.4",
              "status": "affected",
              "version": "4.1.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "4.0.7",
              "status": "affected",
              "version": "4.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "3.9.10",
              "status": "affected",
              "version": "3.9.2",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Marc Montpas"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-863 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-11-07T15:02:38.050Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/669382af-f836-4896-bdcb-5c6a57c99bd9/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Jetpack \u003c 13.9.1 - Subscriber+ Arbitrary Feedback Access",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2024-9926",
    "datePublished": "2024-11-07T15:02:38.050Z",
    "dateReserved": "2024-10-14T09:27:37.145Z",
    "dateUpdated": "2024-11-07T19:53:07.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-2996 (GCVE-0-2023-2996)
Vulnerability from cvelistv5
Published
2023-06-27 13:17
Modified
2024-12-05 16:48
Severity ?
Summary
The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.
Impacted products
Vendor Product Version
Unknown Jetpack Version: 1.9   < 2.0.9
Version: 2.1   < 2.1.7
Version: 2.2   < 2.2.10
Version: 2.3   < 2.3.10
Version: 2.4   < 2.4.7
Version: 2.5   < 2.5.5
Version: 2.6   < 2.6.6
Version: 2.7   < 2.7.5
Version: 2.8   < 2.8.5
Version: 2.9   < 2.9.6
Version: 3.0   < 3.0.6
Version: 3.1   < 3.1.5
Version: 3.2   < 3.2.5
Version: 3.3   < 3.3.6
Version: 3.4   < 3.4.6
Version: 3.5   < 3.5.6
Version: 3.6   < 3.6.4
Version: 3.7   < 3.7.5
Version: 3.8   < 3.8.5
Version: 3.9   < 3.9.9
Version: 4.0   < 4.0.6
Version: 4.1   < 4.1.3
Version: 4.2   < 4.2.4
Version: 4.3   < 4.3.4
Version: 4.4   < 4.4.4
Version: 4.5   < 4.5.2
Version: 4.6   < 4.6.2
Version: 4.7   < 4.7.3
Version: 4.8   < 4.8.4
Version: 4.9   < 4.9.2
Version: 5.0   < 5.0.2
Version: 5.1   < 5.1.3
Version: 5.2   < 5.2.4
Version: 5.3   < 5.3.3
Version: 5.4   < 5.4.3
Version: 5.5   < 5.5.4
Version: 5.6   < 5.6.4
Version: 5.7   < 5.7.4
Version: 5.8   < 5.8.3
Version: 5.9   < 5.9.3
Version: 6.0   < 6.0.3
Version: 6.1   < 6.1.4
Version: 6.2   < 6.2.4
Version: 6.3   < 6.3.6
Version: 6.4   < 6.4.5
Version: 6.5   < 6.5.3
Version: 6.6   < 6.6.4
Version: 6.7   < 6.7.3
Version: 6.8   < 6.8.4
Version: 6.9   < 6.9.3
Version: 7.0   < 7.0.4
Version: 7.1   < 7.1.4
Version: 7.2   < 7.2.4
Version: 7.3   < 7.3.4
Version: 7.4   < 7.4.4
Version: 7.5   < 7.5.6
Version: 7.6   < 7.6.3
Version: 7.7   < 7.7.5
Version: 7.8   < 7.8.3
Version: 7.9   < 7.9.3
Version: 8.0   < 8.0.2
Version: 8.1   < 8.1.3
Version: 8.2   < 8.2.5
Version: 8.3   < 8.3.2
Version: 8.4   < 8.4.4
Version: 8.5   < 8.5.2
Version: 8.6   < 8.6.3
Version: 8.7   < 8.7.3
Version: 8.8   < 8.8.4
Version: 8.9   < 8.9.3
Version: 9.0   < 9.0.4
Version: 9.1   < 9.1.2
Version: 9.2   < 9.2.3
Version: 9.3   < 9.3.4
Version: 9.4   < 9.4.3
Version: 9.5   < 9.5.4
Version: 9.6   < 9.6.3
Version: 9.7   < 9.7.2
Version: 9.8   < 9.8.2
Version: 9.9   < 9.9.2
Version: 10.0   < 10.0.1
Version: 10.1   < 10.1.1
Version: 10.2   < 10.2.2
Version: 10.3   < 10.3.1
Version: 10.4   < 10.4.1
Version: 10.5   < 10.5.2
Version: 10.6   < 10.6.2
Version: 10.7   < 10.7.1
Version: 10.8   < 10.8.1
Version: 10.9   < 10.9.2
Version: 11.0   < 11.0.1
Version: 11.1   < 11.1.3
Version: 11.2   < 11.2.1
Version: 11.3   < 11.3.3
Version: 11.4   < 11.4.1
Version: 11.5   < 11.5.2
Version: 11.6   < 11.6.1
Version: 11.7   < 11.7.2
Version: 11.8   < 11.8.5
Version: 11.9   < 11.9.2
Version: 12.0   < 12.0.1
Version: 12.1   < 12.1.1
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T06:41:03.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "exploit",
              "vdb-entry",
              "technical-description",
              "x_transferred"
            ],
            "url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-2996",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-05T16:47:57.983039Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-05T16:48:09.882Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://wordpress.org/plugins",
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "2.0.9",
              "status": "affected",
              "version": "1.9",
              "versionType": "custom"
            },
            {
              "lessThan": "2.1.7",
              "status": "affected",
              "version": "2.1",
              "versionType": "custom"
            },
            {
              "lessThan": "2.2.10",
              "status": "affected",
              "version": "2.2",
              "versionType": "custom"
            },
            {
              "lessThan": "2.3.10",
              "status": "affected",
              "version": "2.3",
              "versionType": "custom"
            },
            {
              "lessThan": "2.4.7",
              "status": "affected",
              "version": "2.4",
              "versionType": "custom"
            },
            {
              "lessThan": "2.5.5",
              "status": "affected",
              "version": "2.5",
              "versionType": "custom"
            },
            {
              "lessThan": "2.6.6",
              "status": "affected",
              "version": "2.6",
              "versionType": "custom"
            },
            {
              "lessThan": "2.7.5",
              "status": "affected",
              "version": "2.7",
              "versionType": "custom"
            },
            {
              "lessThan": "2.8.5",
              "status": "affected",
              "version": "2.8",
              "versionType": "custom"
            },
            {
              "lessThan": "2.9.6",
              "status": "affected",
              "version": "2.9",
              "versionType": "custom"
            },
            {
              "lessThan": "3.0.6",
              "status": "affected",
              "version": "3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "3.1.5",
              "status": "affected",
              "version": "3.1",
              "versionType": "custom"
            },
            {
              "lessThan": "3.2.5",
              "status": "affected",
              "version": "3.2",
              "versionType": "custom"
            },
            {
              "lessThan": "3.3.6",
              "status": "affected",
              "version": "3.3",
              "versionType": "custom"
            },
            {
              "lessThan": "3.4.6",
              "status": "affected",
              "version": "3.4",
              "versionType": "custom"
            },
            {
              "lessThan": "3.5.6",
              "status": "affected",
              "version": "3.5",
              "versionType": "custom"
            },
            {
              "lessThan": "3.6.4",
              "status": "affected",
              "version": "3.6",
              "versionType": "custom"
            },
            {
              "lessThan": "3.7.5",
              "status": "affected",
              "version": "3.7",
              "versionType": "custom"
            },
            {
              "lessThan": "3.8.5",
              "status": "affected",
              "version": "3.8",
              "versionType": "custom"
            },
            {
              "lessThan": "3.9.9",
              "status": "affected",
              "version": "3.9",
              "versionType": "custom"
            },
            {
              "lessThan": "4.0.6",
              "status": "affected",
              "version": "4.0",
              "versionType": "custom"
            },
            {
              "lessThan": "4.1.3",
              "status": "affected",
              "version": "4.1",
              "versionType": "custom"
            },
            {
              "lessThan": "4.2.4",
              "status": "affected",
              "version": "4.2",
              "versionType": "custom"
            },
            {
              "lessThan": "4.3.4",
              "status": "affected",
              "version": "4.3",
              "versionType": "custom"
            },
            {
              "lessThan": "4.4.4",
              "status": "affected",
              "version": "4.4",
              "versionType": "custom"
            },
            {
              "lessThan": "4.5.2",
              "status": "affected",
              "version": "4.5",
              "versionType": "custom"
            },
            {
              "lessThan": "4.6.2",
              "status": "affected",
              "version": "4.6",
              "versionType": "custom"
            },
            {
              "lessThan": "4.7.3",
              "status": "affected",
              "version": "4.7",
              "versionType": "custom"
            },
            {
              "lessThan": "4.8.4",
              "status": "affected",
              "version": "4.8",
              "versionType": "custom"
            },
            {
              "lessThan": "4.9.2",
              "status": "affected",
              "version": "4.9",
              "versionType": "custom"
            },
            {
              "lessThan": "5.0.2",
              "status": "affected",
              "version": "5.0",
              "versionType": "custom"
            },
            {
              "lessThan": "5.1.3",
              "status": "affected",
              "version": "5.1",
              "versionType": "custom"
            },
            {
              "lessThan": "5.2.4",
              "status": "affected",
              "version": "5.2",
              "versionType": "custom"
            },
            {
              "lessThan": "5.3.3",
              "status": "affected",
              "version": "5.3",
              "versionType": "custom"
            },
            {
              "lessThan": "5.4.3",
              "status": "affected",
              "version": "5.4",
              "versionType": "custom"
            },
            {
              "lessThan": "5.5.4",
              "status": "affected",
              "version": "5.5",
              "versionType": "custom"
            },
            {
              "lessThan": "5.6.4",
              "status": "affected",
              "version": "5.6",
              "versionType": "custom"
            },
            {
              "lessThan": "5.7.4",
              "status": "affected",
              "version": "5.7",
              "versionType": "custom"
            },
            {
              "lessThan": "5.8.3",
              "status": "affected",
              "version": "5.8",
              "versionType": "custom"
            },
            {
              "lessThan": "5.9.3",
              "status": "affected",
              "version": "5.9",
              "versionType": "custom"
            },
            {
              "lessThan": "6.0.3",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            },
            {
              "lessThan": "6.1.4",
              "status": "affected",
              "version": "6.1",
              "versionType": "custom"
            },
            {
              "lessThan": "6.2.4",
              "status": "affected",
              "version": "6.2",
              "versionType": "custom"
            },
            {
              "lessThan": "6.3.6",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            },
            {
              "lessThan": "6.4.5",
              "status": "affected",
              "version": "6.4",
              "versionType": "custom"
            },
            {
              "lessThan": "6.5.3",
              "status": "affected",
              "version": "6.5",
              "versionType": "custom"
            },
            {
              "lessThan": "6.6.4",
              "status": "affected",
              "version": "6.6",
              "versionType": "custom"
            },
            {
              "lessThan": "6.7.3",
              "status": "affected",
              "version": "6.7",
              "versionType": "custom"
            },
            {
              "lessThan": "6.8.4",
              "status": "affected",
              "version": "6.8",
              "versionType": "custom"
            },
            {
              "lessThan": "6.9.3",
              "status": "affected",
              "version": "6.9",
              "versionType": "custom"
            },
            {
              "lessThan": "7.0.4",
              "status": "affected",
              "version": "7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.1.4",
              "status": "affected",
              "version": "7.1",
              "versionType": "custom"
            },
            {
              "lessThan": "7.2.4",
              "status": "affected",
              "version": "7.2",
              "versionType": "custom"
            },
            {
              "lessThan": "7.3.4",
              "status": "affected",
              "version": "7.3",
              "versionType": "custom"
            },
            {
              "lessThan": "7.4.4",
              "status": "affected",
              "version": "7.4",
              "versionType": "custom"
            },
            {
              "lessThan": "7.5.6",
              "status": "affected",
              "version": "7.5",
              "versionType": "custom"
            },
            {
              "lessThan": "7.6.3",
              "status": "affected",
              "version": "7.6",
              "versionType": "custom"
            },
            {
              "lessThan": "7.7.5",
              "status": "affected",
              "version": "7.7",
              "versionType": "custom"
            },
            {
              "lessThan": "7.8.3",
              "status": "affected",
              "version": "7.8",
              "versionType": "custom"
            },
            {
              "lessThan": "7.9.3",
              "status": "affected",
              "version": "7.9",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0.2",
              "status": "affected",
              "version": "8.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.1.3",
              "status": "affected",
              "version": "8.1",
              "versionType": "custom"
            },
            {
              "lessThan": "8.2.5",
              "status": "affected",
              "version": "8.2",
              "versionType": "custom"
            },
            {
              "lessThan": "8.3.2",
              "status": "affected",
              "version": "8.3",
              "versionType": "custom"
            },
            {
              "lessThan": "8.4.4",
              "status": "affected",
              "version": "8.4",
              "versionType": "custom"
            },
            {
              "lessThan": "8.5.2",
              "status": "affected",
              "version": "8.5",
              "versionType": "custom"
            },
            {
              "lessThan": "8.6.3",
              "status": "affected",
              "version": "8.6",
              "versionType": "custom"
            },
            {
              "lessThan": "8.7.3",
              "status": "affected",
              "version": "8.7",
              "versionType": "custom"
            },
            {
              "lessThan": "8.8.4",
              "status": "affected",
              "version": "8.8",
              "versionType": "custom"
            },
            {
              "lessThan": "8.9.3",
              "status": "affected",
              "version": "8.9",
              "versionType": "custom"
            },
            {
              "lessThan": "9.0.4",
              "status": "affected",
              "version": "9.0",
              "versionType": "custom"
            },
            {
              "lessThan": "9.1.2",
              "status": "affected",
              "version": "9.1",
              "versionType": "custom"
            },
            {
              "lessThan": "9.2.3",
              "status": "affected",
              "version": "9.2",
              "versionType": "custom"
            },
            {
              "lessThan": "9.3.4",
              "status": "affected",
              "version": "9.3",
              "versionType": "custom"
            },
            {
              "lessThan": "9.4.3",
              "status": "affected",
              "version": "9.4",
              "versionType": "custom"
            },
            {
              "lessThan": "9.5.4",
              "status": "affected",
              "version": "9.5",
              "versionType": "custom"
            },
            {
              "lessThan": "9.6.3",
              "status": "affected",
              "version": "9.6",
              "versionType": "custom"
            },
            {
              "lessThan": "9.7.2",
              "status": "affected",
              "version": "9.7",
              "versionType": "custom"
            },
            {
              "lessThan": "9.8.2",
              "status": "affected",
              "version": "9.8",
              "versionType": "custom"
            },
            {
              "lessThan": "9.9.2",
              "status": "affected",
              "version": "9.9",
              "versionType": "custom"
            },
            {
              "lessThan": "10.0.1",
              "status": "affected",
              "version": "10.0",
              "versionType": "custom"
            },
            {
              "lessThan": "10.1.1",
              "status": "affected",
              "version": "10.1",
              "versionType": "custom"
            },
            {
              "lessThan": "10.2.2",
              "status": "affected",
              "version": "10.2",
              "versionType": "custom"
            },
            {
              "lessThan": "10.3.1",
              "status": "affected",
              "version": "10.3",
              "versionType": "custom"
            },
            {
              "lessThan": "10.4.1",
              "status": "affected",
              "version": "10.4",
              "versionType": "custom"
            },
            {
              "lessThan": "10.5.2",
              "status": "affected",
              "version": "10.5",
              "versionType": "custom"
            },
            {
              "lessThan": "10.6.2",
              "status": "affected",
              "version": "10.6",
              "versionType": "custom"
            },
            {
              "lessThan": "10.7.1",
              "status": "affected",
              "version": "10.7",
              "versionType": "custom"
            },
            {
              "lessThan": "10.8.1",
              "status": "affected",
              "version": "10.8",
              "versionType": "custom"
            },
            {
              "lessThan": "10.9.2",
              "status": "affected",
              "version": "10.9",
              "versionType": "custom"
            },
            {
              "lessThan": "11.0.1",
              "status": "affected",
              "version": "11.0",
              "versionType": "custom"
            },
            {
              "lessThan": "11.1.3",
              "status": "affected",
              "version": "11.1",
              "versionType": "custom"
            },
            {
              "lessThan": "11.2.1",
              "status": "affected",
              "version": "11.2",
              "versionType": "custom"
            },
            {
              "lessThan": "11.3.3",
              "status": "affected",
              "version": "11.3",
              "versionType": "custom"
            },
            {
              "lessThan": "11.4.1",
              "status": "affected",
              "version": "11.4",
              "versionType": "custom"
            },
            {
              "lessThan": "11.5.2",
              "status": "affected",
              "version": "11.5",
              "versionType": "custom"
            },
            {
              "lessThan": "11.6.1",
              "status": "affected",
              "version": "11.6",
              "versionType": "custom"
            },
            {
              "lessThan": "11.7.2",
              "status": "affected",
              "version": "11.7",
              "versionType": "custom"
            },
            {
              "lessThan": "11.8.5",
              "status": "affected",
              "version": "11.8",
              "versionType": "custom"
            },
            {
              "lessThan": "11.9.2",
              "status": "affected",
              "version": "11.9",
              "versionType": "custom"
            },
            {
              "lessThan": "12.0.1",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            },
            {
              "lessThan": "12.1.1",
              "status": "affected",
              "version": "12.1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Miguel Neto"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-27T13:17:07.479Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Jetpack \u003c 12.1.1 - Author+ Arbitrary File Manipulation via API",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2023-2996",
    "datePublished": "2023-06-27T13:17:07.479Z",
    "dateReserved": "2023-05-30T19:10:08.911Z",
    "dateUpdated": "2024-12-05T16:48:09.882Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-10076 (GCVE-0-2024-10076)
Vulnerability from cvelistv5
Published
2025-05-15 20:06
Modified
2025-05-20 16:03
Summary
The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks
References
https://wpscan.com/vulnerability/15f278f6-0418-4c83-b925-b1a2d8c53e2f/exploit, vdb-entry, technical-description
Impacted products
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-10076",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-20T15:47:11.845919Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-20T16:03:22.267Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://wpscan.com/vulnerability/15f278f6-0418-4c83-b925-b1a2d8c53e2f/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.8",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack Boost",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "3.4.8",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Marc Montpas"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Jetpack  WordPress plugin before 13.8, Jetpack Boost  WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn\u2019t, ultimately making it possible for contributor and above users to perform Stored XSS attacks"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-15T20:06:40.424Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/15f278f6-0418-4c83-b925-b1a2d8c53e2f/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Jetpack \u003c 13.8, Boost \u003c 3.4.8 - Contributor+ Stored XSS",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2024-10076",
    "datePublished": "2025-05-15T20:06:40.424Z",
    "dateReserved": "2024-10-17T09:02:05.021Z",
    "dateUpdated": "2025-05-20T16:03:22.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-10075 (GCVE-0-2024-10075)
Vulnerability from cvelistv5
Published
2025-05-15 20:06
Modified
2025-05-20 16:10
Summary
The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.
References
https://wpscan.com/vulnerability/a984976c-291a-4f68-90d4-e452605ea7d1/exploit, vdb-entry, technical-description
Impacted products
Vendor Product Version
Unknown Jetpack Version: 0   
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.6,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-10075",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-20T16:08:22.976995Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-20T16:10:57.508Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://wpscan.com/vulnerability/a984976c-291a-4f68-90d4-e452605ea7d1/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "13.8",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Marc Montpas"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Jetpack  WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-15T20:06:40.225Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/a984976c-291a-4f68-90d4-e452605ea7d1/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Jetpack \u003c 13.8 - Unauthenticated Arbitrary Block \u0026 Shortcode Execution",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2024-10075",
    "datePublished": "2025-05-15T20:06:40.225Z",
    "dateReserved": "2024-10-17T08:50:53.381Z",
    "dateUpdated": "2025-05-20T16:10:57.508Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-10858 (GCVE-0-2024-10858)
Vulnerability from cvelistv5
Published
2024-12-25 06:00
Modified
2024-12-26 19:53
Summary
The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com.
References
https://wpscan.com/vulnerability/7fecba37-d718-4dd4-89f3-285fb36a4165/exploit, vdb-entry, technical-description
Impacted products
Vendor Product Version
Unknown Jetpack Version: 13.0   
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-10858",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-26T19:52:57.866186Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-26T19:53:41.888Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://wpscan.com/vulnerability/7fecba37-d718-4dd4-89f3-285fb36a4165/"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Jetpack",
          "vendor": "Unknown",
          "versions": [
            {
              "lessThan": "14.1",
              "status": "affected",
              "version": "13.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Eldar (hakupiku)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "WPScan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Jetpack  WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79 Cross-Site Scripting (XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-25T06:00:02.663Z",
        "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
        "shortName": "WPScan"
      },
      "references": [
        {
          "tags": [
            "exploit",
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://wpscan.com/vulnerability/7fecba37-d718-4dd4-89f3-285fb36a4165/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Jetpack 13.0-14.0 - Unauthenticated DOM-XSS",
      "x_generator": {
        "engine": "WPScan CVE Generator"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
    "assignerShortName": "WPScan",
    "cveId": "CVE-2024-10858",
    "datePublished": "2024-12-25T06:00:02.663Z",
    "dateReserved": "2024-11-05T13:26:58.545Z",
    "dateUpdated": "2024-12-26T19:53:41.888Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}