Jetpack – WP Security, Backup, Speed, & Growth, CVE-2024-9926

CVE, Research URL: CVE-2024-9926
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Nov 07, 2024
Research Description: The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form
Affected versions: max 13.9.1.
Status: vulnerable