Jetpack – WP Security, Backup, Speed, & Growth, ffd169a15f0b3f3b7e9e5d2a66f48050efccf852

CVE, Research URL: ffd169a15f0b3f3b7e9e5d2a66f48050efccf852
Home page URL: Security reports for Jetpack – WP Security, Backup, Speed, & Growth
Application: Jetpack – WP Security, Backup, Speed, & Growth
Published on: Apr 26, 2017
Research Description: Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 4.2 Jetpack – WP Security, Backup, Speed, & Growth < 4.2 - Timing Attack The Jetpack plugin for WordPress is vulnerable to timing attacks in versions up to, and including, 4.1.x. This is due to lack of a safe string comparison function.
Affected versions: max 4.2.
Status: vulnerable