Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak

The Jetpack Carousel module allows users to create a "carousel" type image gallery and allows users to comment on the images.

A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

Please refer to the Proof of Concept (PoC) of this vulnerability for further technical details.

The PoC will be displayed on June 17, 2021, to give users the time to update.