Vendor/product archive

automattic / jetpack_boost CVEs

Beta · best-effort

2 CVEs tagged to automattic / jetpack_boost — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to automattic vendor archive

CVE-2024-6584

Published May 15, 2025

The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.

CVSS 9.1 · Critical

Vendor/product tagsBeta · best-effort

CVE-2024-10076

Published May 15, 2025

The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when switching image URLs to their CDN counter…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1