WordPress Plugin Vulnerabilities

Jetpack <= 2.9.2 - class.jetpack.php XML-RPC Access Control Bypass

Description

The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a class.jetpack.php XML-RPC Access Control Bypass security vulnerability.

Affects Plugins

Plugin icon
jetpack
Fixed in 2.9.3

References

CVE
CVE-2014-0173

Miscellaneous

Verified
No
WPVDB ID
918404a0-ea9b-45f6-b080-a0a153cd0c63

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2023-01-30
Title
PrivateContent < 8.4.4 - Brute Force Protection Bypass
Published
2020-10-02
Title
WordPress + Microsoft Office 365 < 11.7 - JWT Signature Verification Bypass
Published
2022-04-28
Title
Countdown & Clock <= 3.0.8 - Pro Features Lock Bypass
Published
2024-06-04
Title
BuddyForms < 2.8.10 - Email Verification Bypass due to Insufficient Randomness
Published
2024-04-22
Title
Appointment Hour Booking < 1.4.57 - Captcha Bypass