Non évaluée

Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution

CVE-2024-10075 Première détection SecPulse May 16, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Faits clés

Gravité: Non évaluée
Publication: May 16, 2025
Première détection SecPulse: May 16, 2025

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03