CVE-2015-9359

Description

References

• blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html · Third Party Advisory
• jetpack.com/2015/04/20/jetpack-3-4-3-coordinated-security-update · Vendor Advisory

Weitere Schwachstellen in jetpack

• CVE-2023-54332MITTEL 6.1Jetpack 11.4 contains a cross-site scripting vulnerability in the contact form module that allows attackers to inject malicious scripts thro…
• CVE-2024-10076MITTEL 5.9The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when sw…
• CVE-2024-10075MITTEL 5.6The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, …
• CVE-2024-10858MITTEL 6.1The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed a…
• CVE-2024-9926MITTEL 4.3The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subsc…