Vulnerability · Published Jun 27, 2023 · Assigned by WPScan

CVE-2023-2996Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API

High 8.8

In plain English

A high-severity security flaw in Jetpack from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 4.8% (higher than 92% of all known vulnerabilities).

Severity (CVSS NVD)8.8High

Exploit odds (30 days)4.8%top 8.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.

Affected products (as reported)

Vendor	Product	Versions
Unknown	Jetpack	1.9 – before 2.0.92.1 – before 2.1.72.2 – before 2.2.102.3 – before 2.3.102.4 – before 2.4.72.5 – before 2.5.52.6 – before 2.6.62.7 – before 2.7.5

References

https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663 exploit, vdb-entry, technical-description
https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/ vendor-advisory