CVE Database /
CVE-2024-9926
CVE · Medium
CVE-2024-9926 — Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 13.9.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-9926
|
Jetpack – WP Security, Backup, Speed, & Growth [jetpack] < 13.9.1 |
Incorrect Authorization |
Medium
4.3
|
< 13.9.1
|
13.9.1 |
2024-10-14 |
—
|
CVE-2024-9926
A security flaw exists within the Jetpack plugin's Contact Form Endpoint functionality, allowing authorized users with a subscription level or higher to view all form submission data without proper clearance checks being performed in versions prior to 13.9.1. This oversight enables malicious actors to access sensitive information. The vulnerability is present in WordPress installations using these affected plugin versions.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings