VULNERABILITY INTELLIGENCE

CVE-2023-29962

CVSS score6.5 MEDIUM

EPSS probability4.82%

CISA KEVNot currently listed

Published2024-01-04

Last modified2026-06-17

Description

The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization.