| Package | Affected versions | Patched versions |
|---|---|---|
| jetpack | < 14.1 | 14.1 |
The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free