Jetpack – WP Security, Backup, Speed, & Growth, CVE-2021-24374
- CVE, Research URL
- Application
- Published on
- Jun 22, 2021
- Research Description
- The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
- Affected versions
-
Min -, max 9.8.
- Status
-
vulnerable