CVE-2024-6584 The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs

Description

The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.

Affected products and versions

Product	Affected versions	Fixed in
Jetpack Boost 3.4	earliest → < 3.4.7	3.4.7

Other CVEs of Jetpack Boost

The 2 CVEs of Jetpack Boost →

CVE-2024-10076 The Jetpack WordPress plugin before 13.8, Jetpack Boost WordPress plugin before 3.4.8 use regexes in the Site… 5.9 Medium