Input validation vulnerability in Jetpack – WP Security, Backup, Speed, & Growth 13.3.1

A popular plugin for WordPress called Jetpack, which provides security, backup, speed, and growth features, has a vulnerability that allows hackers to insert malicious code into web pages. This can happen through the plugin’s wpvideo shortcode and affects all versions up to 13.3.1. The issue is caused by not properly filtering and escaping user-provided attributes, which allows attackers with contributor-level access or higher to execute their own scripts on any page that the user visits.