Input validation vulnerability in Jetpack – WP Security, Backup, Speed, & Growth 6.4.2

Jetpack, a plugin used on WordPress websites, has a security vulnerability up to version 6.4.2. An attacker with contributor privileges can use this vulnerability to inject malicious JavaScript code into blog posts. This code can be used to track visitors to the blog or worse. It is important to update Jetpack to the latest version to protect against this vulnerability.

Detected in:

Jetpack – WP Security, Backup, Speed, & Growth fixed vulnerable versions: >= * <= 6.4.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.