{"affected":[{"affectedData":[{"collectionURL":"https://wordpress.org/plugins","defaultStatus":"unaffected","product":"Jetpack","vendor":"Unknown","versions":[{"lessThan":"2.0.9","status":"affected","version":"1.9","versionType":"custom"},{"lessThan":"2.1.7","status":"affected","version":"2.1","versionType":"custom"},{"lessThan":"2.2.10","status":"affected","version":"2.2","versionType":"custom"},{"lessThan":"2.3.10","status":"affected","version":"2.3","versionType":"custom"},{"lessThan":"2.4.7","status":"affected","version":"2.4","versionType":"custom"},{"lessThan":"2.5.5","status":"affected","version":"2.5","versionType":"custom"},{"lessThan":"2.6.6","status":"affected","version":"2.6","versionType":"custom"},{"lessThan":"2.7.5","status":"affected","version":"2.7","versionType":"custom"},{"lessThan":"2.8.5","status":"affected","version":"2.8","versionType":"custom"},{"lessThan":"2.9.6","status":"affected","version":"2.9","versionType":"custom"},{"lessThan":"3.0.6","status":"affected","version":"3.0","versionType":"custom"},{"lessThan":"3.1.5","status":"affected","version":"3.1","versionType":"custom"},{"lessThan":"3.2.5","status":"affected","version":"3.2","versionType":"custom"},{"lessThan":"3.3.6","status":"affected","version":"3.3","versionType":"custom"},{"lessThan":"3.4.6","status":"affected","version":"3.4","versionType":"custom"},{"lessThan":"3.5.6","status":"affected","version":"3.5","versionType":"custom"},{"lessThan":"3.6.4","status":"affected","version":"3.6","versionType":"custom"},{"lessThan":"3.7.5","status":"affected","version":"3.7","versionType":"custom"},{"lessThan":"3.8.5","status":"affected","version":"3.8","versionType":"custom"},{"lessThan":"3.9.9","status":"affected","version":"3.9","versionType":"custom"},{"lessThan":"4.0.6","status":"affected","version":"4.0","versionType":"custom"},{"lessThan":"4.1.3","status":"affected","version":"4.1","versionType":"custom"},{"lessThan":"4.2.4","status":"affected","version":"4.2","versionType":"custom"},{"lessThan":"4.3.4","status":"affected","version":"4.3","versionType":"custom"},{"lessThan":"4.4.4","status":"affected","version":"4.4","versionType":"custom"},{"lessThan":"4.5.2","status":"affected","version":"4.5","versionType":"custom"},{"lessThan":"4.6.2","status":"affected","version":"4.6","versionType":"custom"},{"lessThan":"4.7.3","status":"affected","version":"4.7","versionType":"custom"},{"lessThan":"4.8.4","status":"affected","version":"4.8","versionType":"custom"},{"lessThan":"4.9.2","status":"affected","version":"4.9","versionType":"custom"},{"lessThan":"5.0.2","status":"affected","version":"5.0","versionType":"custom"},{"lessThan":"5.1.3","status":"affected","version":"5.1","versionType":"custom"},{"lessThan":"5.2.4","status":"affected","version":"5.2","versionType":"custom"},{"lessThan":"5.3.3","status":"affected","version":"5.3","versionType":"custom"},{"lessThan":"5.4.3","status":"affected","version":"5.4","versionType":"custom"},{"lessThan":"5.5.4","status":"affected","version":"5.5","versionType":"custom"},{"lessThan":"5.6.4","status":"affected","version":"5.6","versionType":"custom"},{"lessThan":"5.7.4","status":"affected","version":"5.7","versionType":"custom"},{"lessThan":"5.8.3","status":"affected","version":"5.8","versionType":"custom"},{"lessThan":"5.9.3","status":"affected","version":"5.9","versionType":"custom"},{"lessThan":"6.0.3","status":"affected","version":"6.0","versionType":"custom"},{"lessThan":"6.1.4","status":"affected","version":"6.1","versionType":"custom"},{"lessThan":"6.2.4","status":"affected","version":"6.2","versionType":"custom"},{"lessThan":"6.3.6","status":"affected","version":"6.3","versionType":"custom"},{"lessThan":"6.4.5","status":"affected","version":"6.4","versionType":"custom"},{"lessThan":"6.5.3","status":"affected","version":"6.5","versionType":"custom"},{"lessThan":"6.6.4","status":"affected","version":"6.6","versionType":"custom"},{"lessThan":"6.7.3","status":"affected","version":"6.7","versionType":"custom"},{"lessThan":"6.8.4","status":"affected","version":"6.8","versionType":"custom"},{"lessThan":"6.9.3","status":"affected","version":"6.9","versionType":"custom"},{"lessThan":"7.0.4","status":"affected","version":"7.0","versionType":"custom"},{"lessThan":"7.1.4","status":"affected","version":"7.1","versionType":"custom"},{"lessThan":"7.2.4","status":"affected","version":"7.2","versionType":"custom"},{"lessThan":"7.3.4","status":"affected","version":"7.3","versionType":"custom"},{"lessThan":"7.4.4","status":"affected","version":"7.4","versionType":"custom"},{"lessThan":"7.5.6","status":"affected","version":"7.5","versionType":"custom"},{"lessThan":"7.6.3","status":"affected","version":"7.6","versionType":"custom"},{"lessThan":"7.7.5","status":"affected","version":"7.7","versionType":"custom"},{"lessThan":"7.8.3","status":"affected","version":"7.8","versionType":"custom"},{"lessThan":"7.9.3","status":"affected","version":"7.9","versionType":"custom"},{"lessThan":"8.0.2","status":"affected","version":"8.0","versionType":"custom"},{"lessThan":"8.1.3","status":"affected","version":"8.1","versionType":"custom"},{"lessThan":"8.2.5","status":"affected","version":"8.2","versionType":"custom"},{"lessThan":"8.3.2","status":"affected","version":"8.3","versionType":"custom"},{"lessThan":"8.4.4","status":"affected","version":"8.4","versionType":"custom"},{"lessThan":"8.5.2","status":"affected","version":"8.5","versionType":"custom"},{"lessThan":"8.6.3","status":"affected","version":"8.6","versionType":"custom"},{"lessThan":"8.7.3","status":"affected","version":"8.7","versionType":"custom"},{"lessThan":"8.8.4","status":"affected","version":"8.8","versionType":"custom"},{"lessThan":"8.9.3","status":"affected","version":"8.9","versionType":"custom"},{"lessThan":"9.0.4","status":"affected","version":"9.0","versionType":"custom"},{"lessThan":"9.1.2","status":"affected","version":"9.1","versionType":"custom"},{"lessThan":"9.2.3","status":"affected","version":"9.2","versionType":"custom"},{"lessThan":"9.3.4","status":"affected","version":"9.3","versionType":"custom"},{"lessThan":"9.4.3","status":"affected","version":"9.4","versionType":"custom"},{"lessThan":"9.5.4","status":"affected","version":"9.5","versionType":"custom"},{"lessThan":"9.6.3","status":"affected","version":"9.6","versionType":"custom"},{"lessThan":"9.7.2","status":"affected","version":"9.7","versionType":"custom"},{"lessThan":"9.8.2","status":"affected","version":"9.8","versionType":"custom"},{"lessThan":"9.9.2","status":"affected","version":"9.9","versionType":"custom"},{"lessThan":"10.0.1","status":"affected","version":"10.0","versionType":"custom"},{"lessThan":"10.1.1","status":"affected","version":"10.1","versionType":"custom"},{"lessThan":"10.2.2","status":"affected","version":"10.2","versionType":"custom"},{"lessThan":"10.3.1","status":"affected","version":"10.3","versionType":"custom"},{"lessThan":"10.4.1","status":"affected","version":"10.4","versionType":"custom"},{"lessThan":"10.5.2","status":"affected","version":"10.5","versionType":"custom"},{"lessThan":"10.6.2","status":"affected","version":"10.6","versionType":"custom"},{"lessThan":"10.7.1","status":"affected","version":"10.7","versionType":"custom"},{"lessThan":"10.8.1","status":"affected","version":"10.8","versionType":"custom"},{"lessThan":"10.9.2","status":"affected","version":"10.9","versionType":"custom"},{"lessThan":"11.0.1","status":"affected","version":"11.0","versionType":"custom"},{"lessThan":"11.1.3","status":"affected","version":"11.1","versionType":"custom"},{"lessThan":"11.2.1","status":"affected","version":"11.2","versionType":"custom"},{"lessThan":"11.3.3","status":"affected","version":"11.3","versionType":"custom"},{"lessThan":"11.4.1","status":"affected","version":"11.4","versionType":"custom"},{"lessThan":"11.5.2","status":"affected","version":"11.5","versionType":"custom"},{"lessThan":"11.6.1","status":"affected","version":"11.6","versionType":"custom"},{"lessThan":"11.7.2","status":"affected","version":"11.7","versionType":"custom"},{"lessThan":"11.8.5","status":"affected","version":"11.8","versionType":"custom"},{"lessThan":"11.9.2","status":"affected","version":"11.9","versionType":"custom"},{"lessThan":"12.0.1","status":"affected","version":"12.0","versionType":"custom"},{"lessThan":"12.1.1","status":"affected","version":"12.1","versionType":"custom"}]}],"source":"contact@wpscan.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:automattic:jetpack:*:*:*:*:*:wordpress:*:*","matchCriteriaId":"F5E11109-F3B9-4201-9C0B-94D8FDD0ECE4","versionEndExcluding":"12.1.1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site, deleting arbitrary files, and in rare cases achieve Remote Code Execution via phar deserialization."}],"id":"CVE-2023-2996","lastModified":"2026-06-17T05:54:00.383","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-2996","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-12-05T16:47:57.983039Z","version":"2.0.3"}}]},"published":"2023-06-27T14:15:11.723","references":[{"source":"contact@wpscan.com","tags":["Vendor Advisory"],"url":"https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"},{"source":"contact@wpscan.com","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://jetpack.com/blog/jetpack-12-1-1-critical-security-update/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://wpscan.com/vulnerability/52d221bd-ae42-435d-a90a-60a5ae530663"}],"sourceIdentifier":"contact@wpscan.com","vulnStatus":"Modified"}