Jetpack – WP Security, Backup, Speed, & Growth, 162e5bc508a8fca3a94873242e3470bb3364bf22

CVE, Research URL: 162e5bc508a8fca3a94873242e3470bb3364bf22
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Oct 14, 2024
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 13.9.1 Jetpack < 13.9.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure The Jetpack – WP Security, Backup, Speed, & Growth plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks in the Contact_Form_Endpoint class in various versions version up to, but not including, 13.9.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to read all Jetpack form submissions on the site.
Affected versions: max 13.9.1.
Status: vulnerable