Description (CNA)
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Automattic / Jetpack – WP Security, Backup, Speed, & Growth | affected 9.8 before 9.8 |
CWE
CWE-639
References
- https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33
- https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories/
ADP enrichment
No English description supplied.