Skip to content
Sign in Sign up
JA EN FR
SecPulse
Unrated

Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution

CVE-2024-10075 First seen on SecPulse
Original description The description as published by the source.

The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details