Jetpack WordPress Plugin Unauthenticated Arbitrary Block and Shortcode Execution Vulnerability

A vulnerability exists in the Jetpack WordPress plugin in versions prior to 13.8. The issue arises because the plugin does not properly restrict access to posts created by the Contact Form, potentially allowing unauthenticated users to execute arbitrary shortcodes and blocks.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shortcodes and blocks by unauthenticated users.

Remediation

Users are advised to update the Jetpack WordPress plugin to version 13.8 or later.