Automattic

Jetpack Boost

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.1

CVE-2024-6584

Exploit
  • EPSS 0.1%
  • Published 15.05.2025 20:15:55
  • Last modified 11.06.2025 17:13:03

The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.

5.9

CVE-2024-10076

  • EPSS 0.02%
  • Published 15.05.2025 20:15:32
  • Last modified 04.06.2025 16:50:53

The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ulti...