UpHeron
All vulnerabilities

Servers and applications · WordPress plugins

CVE-2023-47774

Jetpack – WP Security, Backup, Speed, & Growth: Improper Restriction of Rendered UI Layers or Frames

Severity
Medium 5.4
Published
15 Nov 2023
Last changed
17 Jun 2026
Added to UpHeron
18 Oct 2026
Fixed in
12.7
Also known as
WPV-ecf77c270f08
Sources
NVD, WPVulnerability

Description

Improper Restriction of Rendered UI Layers or Frames vulnerability in Automattic Jetpack allows Clickjacking.This issue affects Jetpack: from n/a before 12.7.

Affected software

SoftwareAffected versions
JetpackServers and applications · cpe:a:automattic:jetpack
  • Every version before 12.7
JetpackWordPress plugins · wp-plugin:jetpack
  • Every version before 12.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-47774
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-47774
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/jetpack/jetpack-127-authenticatedcontributor-clickjacking-via-iframe-injection