WordPress CVEs

Description

The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form

Affected WordPress components

• Jetpack – WP Security, Backup, Speed, & Growth Plugin · jetpack
  Confirmed match Active
  From 7.7 (including) to 7.7.6 (excluding); From 13.9 (including) to 13.9.1 (excluding); From 13.8 (including) to 13.8.2 (excluding); From 13.7 (including) to 13.7.1 (excluding); From 13.6 (including) to 13.6.1 (excluding); From 13.5 (including) to 13.5.1 (excluding); From 13.4 (including) to 13.4.4 (excluding); From 13.3 (including) to 13.3.2 (excluding); From 13.2 (including) to 13.2.3 (excluding); From 13.1 (including) to 13.1.4 (excluding); From 13.0 (including) to 13.0.1 (excluding); From 12.9 (including) to 12.9.4 (excluding); From 12.8 (including) to 12.8.2 (excluding); From 12.7 (including) to 12.7.2 (excluding); From 12.6 (including) to 12.6.3 (excluding); From 12.5 (including) to 12.5.1 (excluding); From 12.4 (including) to 12.4.1 (excluding); From 12.3 (including) to 12.3.1 (excluding); From 12.2 (including) to 12.2.2 (excluding); From 12.1 (including) to 12.1.2 (excluding); From 12.0 (including) to 12.0.2 (excluding); From 11.9 (including) to 11.9.3 (excluding); From 11.8 (including) to 11.8.6 (excluding); From 11.7 (including) to 11.7.3 (excluding); From 11.6 (including) to 11.6.2 (excluding); From 11.5 (including) to 11.5.3 (excluding); From 11.4 (including) to 11.4.2 (excluding); From 11.3 (including) to 11.3.4 (excluding); From 11.2 (including) to 11.2.2 (excluding); From 11.1 (including) to 11.1.4 (excluding); From 11.0 (including) to 11.0.2 (excluding); From 10.9 (including) to 10.9.3 (excluding); From 10.8 (including) to 10.8.2 (excluding); From 10.7 (including) to 10.7.2 (excluding); From 10.6 (including) to 10.6.2 (excluding); From 10.5 (including) to 10.5.3 (excluding); From 10.4 (including) to 10.4.2 (excluding); From 10.3 (including) to 10.3.2 (excluding); From 10.2 (including) to 10.2.3 (excluding); From 10.1 (including) to 10.1.2 (excluding); From 10.0 (including) to 10.0.2 (excluding); From 9.9 (including) to 9.9.3 (excluding); From 9.8 (including) to 9.8.3 (excluding); From 9.7 (including) to 9.7.3 (excluding); From 9.6 (including) to 9.6.4 (excluding); From 9.5 (including) to 9.5.5 (excluding); From 9.4 (including) to 9.4.4 (including); From 9.3 (including) to 9.3.5 (excluding); From 9.2 (including) to 9.2.4 (excluding); From 9.1 (including) to 9.1.3 (excluding); From 9.0 (including) to 9.0.5 (excluding); From 8.9 (including) to 8.9.4 (excluding); From 8.8 (including) to 8.8.5 (excluding); From 8.7 (including) to 8.7.4 (excluding); From 8.6 (including) to 8.6.4 (excluding); From 8.5 (including) to 8.5.3 (excluding); From 8.4 (including) to 8.4.5 (excluding); From 8.3 (including) to 8.3.3 (excluding); From 8.2 (including) to 8.2.6 (excluding); From 8.1 (including) to 8.1.4 (excluding); From 8.0 (including) to 8.0.3 (excluding); From 7.9 (including) to 7.9.4 (excluding); From 7.8 (including) to 7.8.4 (excluding); From 7.6 (including) to 7.6.4 (excluding); From 7.5 (including) to 7.5.7 (excluding); From 7.4 (including) to 7.4.5 (excluding); From 7.3 (including) to 7.3.5 (excluding); From 7.2 (including) to 7.2.5 (excluding); From 7.1 (including) to 7.1.5 (excluding); From 7.0 (including) to 7.0.5 (excluding); From 6.9 (including) to 6.9.4 (excluding); From 6.8 (including) to 6.8.5 (excluding); From 6.7 (including) to 6.7.4 (excluding); From 6.6 (including) to 6.6.5 (excluding); From 6.5 (including) to 6.5.4 (excluding); From 6.4 (including) to 6.4.6 (excluding); From 6.3 (including) to 6.3.7 (excluding); From 6.2 (including) to 6.2.5 (excluding); From 6.1 (including) to 6.1.5 (excluding); From 6.0 (including) to 6.0.4 (excluding); From 5.9 (including) to 5.9.4 (excluding); From 5.8 (including) to 5.8.4 (excluding); From 5.7 (including) to 5.7.5 (excluding); From 5.6 (including) to 5.6.5 (excluding); From 5.5 (including) to 5.5.5 (excluding); From 5.4 (including) to 5.4.4 (excluding); From 5.3 (including) to 5.3.4 (excluding); From 5.2 (including) to 5.2.5 (excluding); From 5.1 (including) to 5.1.4 (excluding); From 5.0 (including) to 5.0.3 (excluding); From 4.9 (including) to 4.9.3 (excluding); From 4.8 (including) to 4.8.5 (excluding); From 4.7 (including) to 4.7.4 (excluding); From 4.6 (including) to 4.6.3 (excluding); From 4.5 (including) to 4.5.3 (excluding); From 4.4 (including) to 4.4.5 (excluding); From 4.3 (including) to 4.3.5 (excluding); From 4.2 (including) to 4.2.5 (excluding); From 4.1.0 (including) to 4.1.4 (excluding); From 4.0.0 (including) to 4.0.7 (excluding); From 3.9.2 (including) to 3.9.10 (excluding); From 9.4 (including) to 9.4.4 (excluding); Version 13.9; Version 13.0; Version 13.5; Version 13.6; Version 13.7
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• Unknown Jetpack — From 13.9 (including) to 13.9.1 (excluding)
• Unknown Jetpack — From 13.8 (including) to 13.8.2 (excluding)
• Unknown Jetpack — From 13.7 (including) to 13.7.1 (excluding)
• Unknown Jetpack — From 13.6 (including) to 13.6.1 (excluding)
• Unknown Jetpack — From 13.5 (including) to 13.5.1 (excluding)
• Unknown Jetpack — From 13.4 (including) to 13.4.4 (excluding)
• Unknown Jetpack — From 13.3 (including) to 13.3.2 (excluding)
• Unknown Jetpack — From 13.2 (including) to 13.2.3 (excluding)
• Unknown Jetpack — From 13.1 (including) to 13.1.4 (excluding)
• Unknown Jetpack — From 13.0 (including) to 13.0.1 (excluding)
• Unknown Jetpack — From 12.9 (including) to 12.9.4 (excluding)
• Unknown Jetpack — From 12.8 (including) to 12.8.2 (excluding)
• Unknown Jetpack — From 12.7 (including) to 12.7.2 (excluding)
• Unknown Jetpack — From 12.6 (including) to 12.6.3 (excluding)
• Unknown Jetpack — From 12.5 (including) to 12.5.1 (excluding)
• Unknown Jetpack — From 12.4 (including) to 12.4.1 (excluding)
• Unknown Jetpack — From 12.3 (including) to 12.3.1 (excluding)
• Unknown Jetpack — From 12.2 (including) to 12.2.2 (excluding)
• Unknown Jetpack — From 12.1 (including) to 12.1.2 (excluding)
• Unknown Jetpack — From 12.0 (including) to 12.0.2 (excluding)
• Unknown Jetpack — From 11.9 (including) to 11.9.3 (excluding)
• Unknown Jetpack — From 11.8 (including) to 11.8.6 (excluding)
• Unknown Jetpack — From 11.7 (including) to 11.7.3 (excluding)
• Unknown Jetpack — From 11.6 (including) to 11.6.2 (excluding)
• Unknown Jetpack — From 11.5 (including) to 11.5.3 (excluding)
• Unknown Jetpack — From 11.4 (including) to 11.4.2 (excluding)
• Unknown Jetpack — From 11.3 (including) to 11.3.4 (excluding)
• Unknown Jetpack — From 11.2 (including) to 11.2.2 (excluding)
• Unknown Jetpack — From 11.1 (including) to 11.1.4 (excluding)
• Unknown Jetpack — From 11.0 (including) to 11.0.2 (excluding)
• Unknown Jetpack — From 10.9 (including) to 10.9.3 (excluding)
• Unknown Jetpack — From 10.8 (including) to 10.8.2 (excluding)
• Unknown Jetpack — From 10.7 (including) to 10.7.2 (excluding)
• Unknown Jetpack — From 10.6 (including) to 10.6.2 (excluding)
• Unknown Jetpack — From 10.5 (including) to 10.5.3 (excluding)
• Unknown Jetpack — From 10.4 (including) to 10.4.2 (excluding)
• Unknown Jetpack — From 10.3 (including) to 10.3.2 (excluding)
• Unknown Jetpack — From 10.2 (including) to 10.2.3 (excluding)
• Unknown Jetpack — From 10.1 (including) to 10.1.2 (excluding)
• Unknown Jetpack — From 10.0 (including) to 10.0.2 (excluding)
• Unknown Jetpack — From 9.9 (including) to 9.9.3 (excluding)
• Unknown Jetpack — From 9.8 (including) to 9.8.3 (excluding)
• Unknown Jetpack — From 9.7 (including) to 9.7.3 (excluding)
• Unknown Jetpack — From 9.6 (including) to 9.6.4 (excluding)
• Unknown Jetpack — From 9.5 (including) to 9.5.5 (excluding)
• Unknown Jetpack — From 9.4 (including) to 9.4.4 (excluding)
• Unknown Jetpack — From 9.3 (including) to 9.3.5 (excluding)
• Unknown Jetpack — From 9.2 (including) to 9.2.4 (excluding)
• Unknown Jetpack — From 9.1 (including) to 9.1.3 (excluding)
• Unknown Jetpack — From 9.0 (including) to 9.0.5 (excluding)
• Unknown Jetpack — From 8.9 (including) to 8.9.4 (excluding)
• Unknown Jetpack — From 8.8 (including) to 8.8.5 (excluding)
• Unknown Jetpack — From 8.7 (including) to 8.7.4 (excluding)
• Unknown Jetpack — From 8.6 (including) to 8.6.4 (excluding)
• Unknown Jetpack — From 8.5 (including) to 8.5.3 (excluding)
• Unknown Jetpack — From 8.4 (including) to 8.4.5 (excluding)
• Unknown Jetpack — From 8.3 (including) to 8.3.3 (excluding)
• Unknown Jetpack — From 8.2 (including) to 8.2.6 (excluding)
• Unknown Jetpack — From 8.1 (including) to 8.1.4 (excluding)
• Unknown Jetpack — From 8.0 (including) to 8.0.3 (excluding)
• Unknown Jetpack — From 7.9 (including) to 7.9.4 (excluding)
• Unknown Jetpack — From 7.8 (including) to 7.8.4 (excluding)
• Unknown Jetpack — From 7.7 (including) to 7.7.6 (excluding)
• Unknown Jetpack — From 7.6 (including) to 7.6.4 (excluding)
• Unknown Jetpack — From 7.5 (including) to 7.5.7 (excluding)
• Unknown Jetpack — From 7.4 (including) to 7.4.5 (excluding)
• Unknown Jetpack — From 7.3 (including) to 7.3.5 (excluding)
• Unknown Jetpack — From 7.2 (including) to 7.2.5 (excluding)
• Unknown Jetpack — From 7.1 (including) to 7.1.5 (excluding)
• Unknown Jetpack — From 7.0 (including) to 7.0.5 (excluding)
• Unknown Jetpack — From 6.9 (including) to 6.9.4 (excluding)
• Unknown Jetpack — From 6.8 (including) to 6.8.5 (excluding)
• Unknown Jetpack — From 6.7 (including) to 6.7.4 (excluding)
• Unknown Jetpack — From 6.6 (including) to 6.6.5 (excluding)
• Unknown Jetpack — From 6.5 (including) to 6.5.4 (excluding)
• Unknown Jetpack — From 6.4 (including) to 6.4.6 (excluding)
• Unknown Jetpack — From 6.3 (including) to 6.3.7 (excluding)
• Unknown Jetpack — From 6.2 (including) to 6.2.5 (excluding)
• Unknown Jetpack — From 6.1 (including) to 6.1.5 (excluding)
• Unknown Jetpack — From 6.0 (including) to 6.0.4 (excluding)
• Unknown Jetpack — From 5.9 (including) to 5.9.4 (excluding)
• Unknown Jetpack — From 5.8 (including) to 5.8.4 (excluding)
• Unknown Jetpack — From 5.7 (including) to 5.7.5 (excluding)
• Unknown Jetpack — From 5.6 (including) to 5.6.5 (excluding)
• Unknown Jetpack — From 5.5 (including) to 5.5.5 (excluding)
• Unknown Jetpack — From 5.4 (including) to 5.4.4 (excluding)
• Unknown Jetpack — From 5.3 (including) to 5.3.4 (excluding)
• Unknown Jetpack — From 5.2 (including) to 5.2.5 (excluding)
• Unknown Jetpack — From 5.1 (including) to 5.1.4 (excluding)
• Unknown Jetpack — From 5.0 (including) to 5.0.3 (excluding)
• Unknown Jetpack — From 4.9 (including) to 4.9.3 (excluding)
• Unknown Jetpack — From 4.8 (including) to 4.8.5 (excluding)
• Unknown Jetpack — From 4.7 (including) to 4.7.4 (excluding)
• Unknown Jetpack — From 4.6 (including) to 4.6.3 (excluding)
• Unknown Jetpack — From 4.5 (including) to 4.5.3 (excluding)
• Unknown Jetpack — From 4.4 (including) to 4.4.5 (excluding)
• Unknown Jetpack — From 4.3 (including) to 4.3.5 (excluding)
• Unknown Jetpack — From 4.2 (including) to 4.2.5 (excluding)
• Unknown Jetpack — From 4.1.0 (including) to 4.1.4 (excluding)
• Unknown Jetpack — From 4.0.0 (including) to 4.0.7 (excluding)
• Unknown Jetpack — From 3.9.2 (including) to 3.9.10 (excluding)
• automattic jetpack — From 13.9 (including) to 13.9.1 (excluding)
• automattic jetpack — From 13.8 (including) to 13.8.2 (excluding)
• automattic jetpack — From 13.7 (including) to 13.7.1 (excluding)
• automattic jetpack — From 13.6 (including) to 13.6.1 (excluding)
• automattic jetpack — From 13.5 (including) to 13.5.1 (excluding)
• automattic jetpack — From 13.4 (including) to 13.4.4 (excluding)
• automattic jetpack — From 13.3 (including) to 13.3.2 (excluding)
• automattic jetpack — From 13.2 (including) to 13.2.3 (excluding)
• automattic jetpack — From 13.1 (including) to 13.1.4 (excluding)
• automattic jetpack — From 13.0 (including) to 13.0.1 (excluding)
• automattic jetpack — From 12.9 (including) to 12.9.4 (excluding)
• automattic jetpack — From 12.8 (including) to 12.8.2 (excluding)
• automattic jetpack — From 12.7 (including) to 12.7.2 (excluding)
• automattic jetpack — From 12.6 (including) to 12.6.3 (excluding)
• automattic jetpack — From 12.5 (including) to 12.5.1 (excluding)
• automattic jetpack — From 12.4 (including) to 12.4.1 (excluding)
• automattic jetpack — From 12.3 (including) to 12.3.1 (excluding)
• automattic jetpack — From 12.2 (including) to 12.2.2 (excluding)
• automattic jetpack — From 12.1 (including) to 12.1.2 (excluding)
• automattic jetpack — From 12.0 (including) to 12.0.2 (excluding)
• automattic jetpack — From 11.9 (including) to 11.9.3 (excluding)
• automattic jetpack — From 11.8 (including) to 11.8.6 (excluding)
• automattic jetpack — From 11.7 (including) to 11.7.3 (excluding)
• automattic jetpack — From 11.6 (including) to 11.6.2 (excluding)
• automattic jetpack — From 11.5 (including) to 11.5.3 (excluding)
• automattic jetpack — From 11.4 (including) to 11.4.2 (excluding)
• automattic jetpack — From 11.3 (including) to 11.3.4 (excluding)
• automattic jetpack — From 11.2 (including) to 11.2.2 (excluding)
• automattic jetpack — From 11.1 (including) to 11.1.4 (excluding)
• automattic jetpack — From 11.0 (including) to 11.0.2 (excluding)
• automattic jetpack — From 10.9 (including) to 10.9.3 (excluding)
• automattic jetpack — From 10.8 (including) to 10.8.2 (excluding)
• automattic jetpack — From 10.7 (including) to 10.7.2 (excluding)
• automattic jetpack — From 10.6 (including) to 10.6.2 (excluding)
• automattic jetpack — From 10.5 (including) to 10.5.3 (excluding)
• automattic jetpack — From 10.4 (including) to 10.4.2 (excluding)
• automattic jetpack — From 10.3 (including) to 10.3.2 (excluding)
• automattic jetpack — From 10.2 (including) to 10.2.3 (excluding)
• automattic jetpack — From 10.1 (including) to 10.1.2 (excluding)
• automattic jetpack — From 10.0 (including) to 10.0.2 (excluding)
• automattic jetpack — From 9.9 (including) to 9.9.3 (excluding)
• automattic jetpack — From 9.8 (including) to 9.8.3 (excluding)
• automattic jetpack — From 9.7 (including) to 9.7.3 (excluding)
• automattic jetpack — From 9.6 (including) to 9.6.4 (excluding)
• automattic jetpack — From 9.5 (including) to 9.5.5 (excluding)
• automattic jetpack — From 9.4 (including) to 9.4.4 (including)
• automattic jetpack — From 9.3 (including) to 9.3.5 (excluding)
• automattic jetpack — From 9.2 (including) to 9.2.4 (excluding)
• automattic jetpack — From 9.1 (including) to 9.1.3 (excluding)
• automattic jetpack — From 9.0 (including) to 9.0.5 (excluding)
• automattic jetpack — From 8.9 (including) to 8.9.4 (excluding)
• automattic jetpack — From 8.8 (including) to 8.8.5 (excluding)
• automattic jetpack — From 8.7 (including) to 8.7.4 (excluding)
• automattic jetpack — From 8.6 (including) to 8.6.4 (excluding)
• automattic jetpack — From 8.5 (including) to 8.5.3 (excluding)
• automattic jetpack — From 8.4 (including) to 8.4.5 (excluding)
• automattic jetpack — From 8.3 (including) to 8.3.3 (excluding)
• automattic jetpack — From 8.2 (including) to 8.2.6 (excluding)
• automattic jetpack — From 8.1 (including) to 8.1.4 (excluding)
• automattic jetpack — From 8.0 (including) to 8.0.3 (excluding)
• automattic jetpack — From 7.9 (including) to 7.9.4 (excluding)
• automattic jetpack — From 7.8 (including) to 7.8.4 (excluding)
• automattic jetpack — From 7.7 (including) to 7.7.6 (excluding)
• automattic jetpack — From 7.6 (including) to 7.6.4 (excluding)
• automattic jetpack — From 7.5 (including) to 7.5.7 (excluding)
• automattic jetpack — From 7.4 (including) to 7.4.5 (excluding)
• automattic jetpack — From 7.3 (including) to 7.3.5 (excluding)
• automattic jetpack — From 7.2 (including) to 7.2.5 (excluding)
• automattic jetpack — From 7.1 (including) to 7.1.5 (excluding)
• automattic jetpack — From 7.0 (including) to 7.0.5 (excluding)
• automattic jetpack — From 6.9 (including) to 6.9.4 (excluding)
• automattic jetpack — From 6.8 (including) to 6.8.5 (excluding)
• automattic jetpack — From 6.7 (including) to 6.7.4 (excluding)
• automattic jetpack — From 6.6 (including) to 6.6.5 (excluding)
• automattic jetpack — From 6.5 (including) to 6.5.4 (excluding)
• automattic jetpack — From 6.4 (including) to 6.4.6 (excluding)
• automattic jetpack — From 6.3 (including) to 6.3.7 (excluding)
• automattic jetpack — From 6.2 (including) to 6.2.5 (excluding)
• automattic jetpack — From 6.1 (including) to 6.1.5 (excluding)
• automattic jetpack — From 6.0 (including) to 6.0.4 (excluding)
• automattic jetpack — From 5.9 (including) to 5.9.4 (excluding)
• automattic jetpack — From 5.8 (including) to 5.8.4 (excluding)
• automattic jetpack — From 5.7 (including) to 5.7.5 (excluding)
• automattic jetpack — From 5.6 (including) to 5.6.5 (excluding)
• automattic jetpack — From 5.5 (including) to 5.5.5 (excluding)
• automattic jetpack — From 5.4 (including) to 5.4.4 (excluding)
• automattic jetpack — From 5.3 (including) to 5.3.4 (excluding)
• automattic jetpack — From 5.2 (including) to 5.2.5 (excluding)
• automattic jetpack — From 5.1 (including) to 5.1.4 (excluding)
• automattic jetpack — From 5.0 (including) to 5.0.3 (excluding)
• automattic jetpack — From 4.9 (including) to 4.9.3 (excluding)
• automattic jetpack — From 4.8 (including) to 4.8.5 (excluding)
• automattic jetpack — From 4.7 (including) to 4.7.4 (excluding)
• automattic jetpack — From 4.6 (including) to 4.6.3 (excluding)
• automattic jetpack — From 4.5 (including) to 4.5.3 (excluding)
• automattic jetpack — From 4.4 (including) to 4.4.5 (excluding)
• automattic jetpack — From 4.3 (including) to 4.3.5 (excluding)
• automattic jetpack — From 4.2 (including) to 4.2.5 (excluding)
• automattic jetpack — From 4.1.0 (including) to 4.1.4 (excluding)
• automattic jetpack — From 4.0.0 (including) to 4.0.7 (excluding)
• automattic jetpack — From 3.9.2 (including) to 3.9.10 (excluding)
• automattic jetpack — Version 13.0
• automattic jetpack — Version 13.5
• automattic jetpack — Version 13.6
• automattic jetpack — Version 13.7
• automattic jetpack — Version 13.9

References

• wpscan.com https://wpscan.com/vulnerability/669382af-f836-4896-bdcb-5c6a57c99bd9/ Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record