← CVE Intelligence

CVE-2024-10075

Jetpack < 13.8 - Unauthenticated Arbitrary Block & Shortcode Execution PUBLISHED

Description (CNA)

The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.

Affected (CNA)

Vendor / productVersions
Unknown / Jetpackaffected 0 before 13.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.