5.6
CVE-2024-10075
- EPSS 0.07%
- Published 15.05.2025 20:15:32
- Last modified 04.06.2025 16:49:41
- Source contact@wpscan.com
- Teams watchlist Login
- Open Login
The Jetpack WordPress plugin before 13.8 does not ensure that the post created by the Contact Form is only accessible to authorised users, which could allow unauthenticated users to run arbitrary shortcodes and block.
Data is provided by the National Vulnerability Database (NVD)
Automattic ≫ Jetpack SwPlatformwordpress Version < 13.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.211 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.6 | 2.2 | 3.4 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
|