Flaw in popular WordPress plug-in Jetpack puts over a million websites at risk

ronjor · May 30, 2016

The vulnerability can be exploited to inject malicious code into comments

By Lucian Constantin IDG News Service | May 30, 2016 6:00 AM PT
Click to expand...

http://www.networkworld.com/article...ack-puts-over-a-million-websites-at-risk.html

guest · Nov 20, 2019

Millions of Sites Exposed by Flaw in Jetpack WordPress Plugin
November 20, 2019
https://www.bleepingcomputer.com/ne...-exposed-by-flaw-in-jetpack-wordpress-plugin/

Admins and owners of WordPress websites are urged to immediately apply the Jetpack 7.9.1 critical security update to prevent potential attacks that could abuse a vulnerability that has existed since Jetpack 5.1.
You can update your installation to the 7.9.1 version through your dashboard, or manually download the Jetpack 7.9.1 release here.
Not yet exploited in the wild
The vulnerability was found in the way Jetpack processed embed code and Adham Sadaqah was the one credited for responsibly disclosing the security issue.
While not a lot of details were disclosed regarding the security flaw to protect the sites that haven't yet updated, the announcement made by Jetpack says that the bug impacts all versions starting with the 5.1 release and going back as far as July 2017.
Millions already patched
At the moment over four million out of the more than five million WordPress websites that use Jetpack have already been updated according to its entry on the WordPress Plugins site.

"Versions released today include 5.1.1, 5.2.2, 5.3.1, 5.4.1, 5.5.2, 5.6.2, 5.7.2, 5.8.1, 5.9.1, 6.0.1, 6.1.2, 6.2.2, 6.3.4, 6.4.3, 6.5.1, 6.6.2, 6.7.1, 6.8.2, 6.9.1, 7.0.2, 7.1.2, 7.2.2, 7.3.2, 7.4.2, 7.5.4, 7.6.1, 7.7.3, 7.8.1, 7.9.1," the Jetpack dev team says.
Click to expand...

Jetpack: Jetpack 7.9.1: Maintenance and Security Release

Log in or Sign up

Flaw in popular WordPress plug-in Jetpack puts over a million websites at risk

ronjor Global Moderator

guest Guest

Log in or Sign up

Flaw in popular WordPress plug-in Jetpack puts over a million websites at risk

ronjor Global Moderator

guest Guest

Useful Searches