CVE-2021-24374: Automattic Jetpack

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

Affected products

• Automattic Jetpack: before 9.8 (fixed in 9.8)

Published 2021-06-21. Last modified 2026-06-17.