WordPress Plugin Vulnerabilities

Jetpack 5.1-7.9 - Vulnerability in Shortcode Embed Code

Description

The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Vulnerability in Shortcode Embed Code security vulnerability.

Affects Plugins

Plugin icon
jetpack
Fixed in 7.9.1

References

URL
https://plugins.trac.wordpress.org/changeset/2196895/jetpack
URL
https://github.com/Automattic/jetpack/commit/5e38904da8eda0bc86b29fd5298c222e362583df

Miscellaneous

Original Researcher
Adham Sadaqah
Submitter
Ryan Dewhurst
Verified
No
WPVDB ID
7105cb30-e393-4c79-aeb7-7439bd560738

Timeline

Publicly Published
2019-11-19 (about 6 years ago)
Added
2019-11-20 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2021-11-10
Title
WordPress < 5.8.2 - Expired DST Root CA X3 Certificate
Published
2025-01-29
Title
WooCommerce Wishlist < 1.8.8 - Unauthenticated Wishlist Disclosure via download_pdf_file Function
Published
2014-08-01
Title
slidedeck2 < 2.3.5 - Unspecified File Inclusion
Published
2014-08-01
Title
Echelon 2.4 - dl-skin.php _mysite_delete_skin_zip Parameter Absolute Path Traversal Remote Directory Deletion
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified