Automattic Jetpack Boost — known CVE vulnerabilities

Every CVE whose affected-product data names Automattic Jetpack Boost, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-6584 — CVSS 9.1 (critical): The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.
• CVE-2024-10076 — CVSS 5.9 (medium): The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site Accelerator features when…