logo

Millions at Risk: Jetpack Plugin Patches Critical Vulnerability

ID: 48f7c86f-57f6-5b89-a80b-82fb39dff390

STIX ID: report--48f7c86f-57f6-5b89-a80b-82fb39dff390

Feed Name: The Cyber Express

Threat Score
60/100

Date Published: 2024-10-15

Date Updated: 2026-04-23

Author: Ashish Khaitan

...
...

Jetpack released version 13.9.1 to patch a critical vulnerability in its Contact Form feature dating back to version 3.9.9 (2016) that could allow any logged-in user to view submitted forms on affected sites; the flaw potentially impacts ~27 million sites, has been patched across many versions, and Jetpack reports no evidence of exploitation while urging immediate updates.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.