WordPress Plugin Vulnerabilities

Jetpack 2.0-4.0.2 - Shortcode Stored Cross-Site Scripting (XSS)

Description

The Jetpack – WP Security, Backup, Speed, & Growth WordPress plugin was affected by a Shortcode Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
jetpack
Fixed in 4.0.3

References

CVE
CVE-2016-10706
URL
http://wptavern.com/jetpack-4-0-3-patches-a-critical-xss-vulnerability
URL
https://blog.sucuri.net/2016/05/security-advisory-stored-xss-jetpack-2.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
957ab0b9-2acb-4f46-93e6-30ad4fcb7fef

Timeline

Publicly Published
2016-05-26 (about 9 years ago)
Added
2016-05-27 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-12-17
Title
WPC Shop as a Customer for WooCommerce < 1.2.9 - Authentication Bypass Due to Insufficiently Unique Key
Published
2018-10-22
Title
Download WP-DBManager <= 2.79.1 - Arbitrary File Delete
Published
2014-08-01
Title
Simple History - RSS Feed "rss_secret" Disclosure Weakness
Published
2015-05-26
Title
Easy Author Image 1.5 - Email Disclosure
Published
2023-11-24
Title
Captcha Code < 3.0 - Captcha Bypass