Description
Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Automattic | Jetpack VideoPress | ≤ 3.6 | — |
Medium · 6.5
CVE-2026-40808
EUVD-2026-96542GHSA-hqxm-q759-7c9m
WordPress Jetpack VideoPress plugin <= 3.6 - Broken Access Control vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack