CVE-2016-10705

Jetpack versions prior to 4.0.4 contained three security flaws: feedback form submissions designated as private were accessible through the REST API to unauthorized users, the Post By Email feature allowed unauthorized modification of its configuration settings, and the Likes module failed to properly sanitize user input, creating a cross-site scripting vulnerability.

Based on public CVE data (MITRE/NVD).