CloudMap 漏洞情报库

中危2026/01/14

Wordpress Jetpack plugin - Server Side Request Forgery

The Jetpack WordPress plugin exposes an endpoint that fetches external URLs provided via the 'urls' parameter to retrieve Twitter (X) card descriptions/metadata. This allows unauthenticated SSRF, enabling attackers to force the server to request attacker-controlled URLs

JetpackPoC 已收录

CVSS—

低危2026/01/14

JetPack - Full Path Disclosure

JetPack WordPress plugin contains a full path disclosure vulnerability due to improper access restrictions in its source files, allowing unauthenticated attackers to retrieve full server paths and aiding exploitation.

JetpackPoC 已收录

CVSS—

中危2026/01/05

Jetpack < 6.5 - Stored Cross-Site Scripting

Detected authenticated stored XSS in Jetpack < 6.5 via crafted Gist shortcode.

JetpackPoC 已收录

CVSS—

Jetpack

关联漏洞

Wordpress Jetpack plugin - Server Side Request Forgery

JetPack - Full Path Disclosure

Jetpack < 6.5 - Stored Cross-Site Scripting