Stored XSS

Jetpack Stored Cross-Site Scripting (XSS) Vulnerability (CVE-2024-4392) — Medium Severity

Unpacking the Jetpack Stored Cross-Site Scripting Vulnerability (CVE-2024-4392) The popular WordPress plugin, Jetpack – WP Security, Backup, Speed, & Growth, has been found to have a security flaw. This flaw is known as a Stored Cross-Site Scripting (XSS) vulnerability. It…

Alex Joseph
January 22, 2026

WordPress Stored Cross-Site Scripting Vulnerability (CVE-2024-4439) — High Severity

Understanding the WordPress XSS Vulnerability A significant security flaw, identified as CVE-2024-4439, has been discovered in WordPress Core, affecting versions up to 6.5.1. This vulnerability allows for Stored Cross-Site Scripting (XSS) through user display names in the Avatar block. In…

Alex Joseph
January 5, 2026