📦

jetpack_boost

Vendor: automattic

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 0.44% Exploit Prob.
Latest CVE CVE-2024-6584 May 15

Security Vulnerability Index

Page 1 / 1
9.1 CVSS
CVE-2024-6584

The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.

EPSS: 0.57%
5.9 CVSS
CVE-2024-10076

The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counterpart. Unfortunately, some of them may match patterns it shouldn’t, ultimately making it possible for contributor and above users to perform Stored XSS attacks

EPSS: 0.31%