Input validation vulnerability in Jetpack – WP Security, Backup, Speed, & Growth 12.7

The Jetpack plugin for WordPress is vulnerable to a security issue called Clickjacking via iframe injection. This issue affects all versions of Jetpack up to and including version 12.6.2. It is caused by insufficient input sanitization and output escaping, which means that attackers with contributor access or higher can inject iframes into pages that can be used to make users perform actions on untrusted sites.