Jetpack <= 4.0.3 - Multiple Vulnerabilities

2016-06-2000:00:00

Anonymous

wpscan.com

0.001 Low

EPSS

Percentile

26.2%

JSON

Jetpack 4.0.4 fixes 3 security bugs: * Private feedback form entries were made available publicly via the REST API * Post By Email settings could be changed * The Likes module was vulnerable to XSS

CPENameOperatorVersion
jetpacklt4.0.4

CPE	Name	Operator	Version
	jetpack	lt	4.0.4

References

jetpack.com/2016/06/20/jetpack-4-0-4-bug-fixes/

0.001 Low

EPSS

Percentile

26.2%

JSON

Related for WPVDB-ID:21BD1537-801A-48EC-9C5F-72D9EFB6801D