CPE Details
Automattic Jetpack 13.9 for WordPress
13.9
2025-05-14
10h19 +00:00
10h19 +00:00
2025-05-14
10h19 +00:00
10h19 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:automattic:jetpack:13.9:*:*:*:*:wordpress:*:*
Informations
Vendor
automatticProduct
jetpackVersion
13.9Target Software
wordpressRelated CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com. | 6.1 |
Moyen |
||
| The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form | 4.3 |
Moyen |
||
| SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
