VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 22, 2014· Updated Jun 17, 2026

CVE-2014-0173

CVE-2014-0173

Description

The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.7.2, 2.8.x before 2.8.2, and 2.9.x before 2.9.3 for WordPress does not properly restrict access to the XML-RPC service, which allows remote attackers to bypass intended restrictions and publish posts via unspecified vectors. NOTE: some of these details are obtained from third party information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

36
  • Automattic/Jetpack35 versions
    cpe:2.3:a:automattic:jetpack:1.9.1:*:*:*:*:wordpress:*:*+ 34 more
    • cpe:2.3:a:automattic:jetpack:1.9.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:1.9.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:1.9:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.0.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.0.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.0.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.0.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.0:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.1.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.1.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2.5:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3.5:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.4.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.4.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.4:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.5:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.6.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.6:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.7:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.8:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.9.1:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.9.2:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.9.3:*:*:*:*:wordpress:*:*
    • cpe:2.3:a:automattic:jetpack:2.9:*:*:*:*:wordpress:*:*
  • WordPress/Jetpackllm-fuzzy
    Range: < 1.9.4 (1.9.x), < 2.0.9 (2.0.x), < 2.1.4 (2.1.x), < 2.2.7 (2.2.x), < 2.3.7 (2.3.x), < 2.4.4 (2.4.x), < 2.5.2 (2.5.x), < 2.6.3 (2.6.x), < 2.7.2 (2.7.x), < 2.8.2 (2.8.x), < 2.9.3 (2.9.x)
    Package: https://wordpress.org/plugins/jetpack

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.