Beveiligingsadvies

CVE-2024-9926

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-07 15:02:38

Laatst bijgewerkt 2024-11-07 19:53:07

Toegewezen door WPScan

CVSS-score 4.3

Status PUBLISHED

Beschrijving

The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form

← Alle CVE's bekijken Bekijk op cve.org ↗