Description
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automattic | Jetpack – WP Security, Backup, Speed, & Growth | 9.8 – < 9.8 | 9.8 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | automattic/jetpack | < 9.8 | 9.8 | GHSA-5hr6-r8h6-wh22 |