{"id":6673,"date":"2014-04-11T04:33:06","date_gmt":"2014-04-11T10:33:06","guid":{"rendered":"https:\/\/www.siteground.com\/blog\/?p=6673"},"modified":"2025-09-18T14:49:24","modified_gmt":"2025-09-18T14:49:24","slug":"jetpack-critical-vulnerability-fixed","status":"publish","type":"post","link":"https:\/\/www.siteground.com\/blog\/jetpack-critical-vulnerability-fixed\/","title":{"rendered":"Jetpack Critical Vulnerability Fixed on SiteGround Servers"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6681\" src=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\" alt=\"jetpack\" width=\"540\" height=\"294\"><\/p>\n<p style=\"text-align: justify;\">Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an <a href=\"https:\/\/jetpack.com\/2014\/04\/10\/jetpack-security-update\/\" target=\"_blank\" rel=\"nofollow noopener\">official statement<\/a>&nbsp;by the Jetpack developers. If the vulnerability was exploited, an attacker could publish new posts in any WordPress installation using Jetpack&nbsp;and possibly get even more access to that site. Although we did not detect any hacked sites through that exploit on our servers, that was a critical security hole and we took several actions to patch it.<\/p>\n<p><!--more--><\/p>\n<h3 style=\"text-align: justify;\">Adding a Rule to Our Firewall System<\/h3>\n<p style=\"text-align: justify;\">Normally, some of the actions of the Jetpack&nbsp;plugin should be executable only through a finite number of IPs that are part of the Jetpack&nbsp;official network. The vulnerability allows other IPs to execute these actions too. That is why the first thing we did was to add an additional rule to our firewall that prevents non-Jetpack IPs to execute such actions.<\/p>\n<h3 style=\"text-align: justify;\">Updating the Jetpack Plugin of Our Users<\/h3>\n<p style=\"text-align: justify;\">We have also updated most of the nearly 12 000 Jetpack&nbsp;plugins detected on our servers to the latest security version released by its developers and applicable for the version branch used. Email, informing about the issue and the update needed was also sent to all users whose Jetpack&nbsp;update was not under our control.<\/p>\n\n\n<p>[subscribe_cta]<\/p>\n","protected":false},"excerpt":{"rendered":"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers. If the vulnerability was exploited, an attacker could publish new posts in any WordPress installation using Jetpack&nbsp;and possibly get even more access to that site. Although we did not detect any hacked&hellip;","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2098,2018,12,15],"tags":[],"class_list":["post-6673","post","type-post","status-publish","format-standard","hentry","category-hosting-insights","category-product-updates","category-security","category-wordpress"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.2 (Yoast SEO v24.2) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Jetpack Critical Vulnerability Fixed on SiteGround Servers : SiteGround Blog<\/title>\n<meta name=\"description\" content=\"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Jetpack Critical Vulnerability Fixed on SiteGround Servers\" \/>\n<meta property=\"og:description\" content=\"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\" \/>\n<meta property=\"og:site_name\" content=\"SiteGround\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/siteground\" \/>\n<meta property=\"article:published_time\" content=\"2014-04-11T10:33:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-18T14:49:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"540\" \/>\n\t<meta property=\"og:image:height\" content=\"294\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Hristo Pandjarov\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@siteground\" \/>\n<meta name=\"twitter:site\" content=\"@siteground\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Hristo Pandjarov\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\"},\"author\":{\"name\":\"Hristo Pandjarov\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\"},\"headline\":\"Jetpack Critical Vulnerability Fixed on SiteGround Servers\",\"datePublished\":\"2014-04-11T10:33:06+00:00\",\"dateModified\":\"2025-09-18T14:49:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\"},\"wordCount\":222,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\",\"articleSection\":[\"Hosting Insights\",\"Product Updates\",\"Security\",\"WordPress\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\",\"name\":\"Jetpack Critical Vulnerability Fixed on SiteGround Servers : SiteGround Blog\",\"isPartOf\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\",\"datePublished\":\"2014-04-11T10:33:06+00:00\",\"dateModified\":\"2025-09-18T14:49:24+00:00\",\"description\":\"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.\",\"breadcrumb\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg\",\"width\":540,\"height\":294},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/newblog.siteground.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Jetpack Critical Vulnerability Fixed on SiteGround Servers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#website\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"name\":\"SiteGround Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#organization\",\"name\":\"SiteGround Blog\",\"url\":\"https:\/\/newblog.siteground.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"contentUrl\":\"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg\",\"width\":1200,\"height\":400,\"caption\":\"SiteGround Blog\"},\"image\":{\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/siteground\",\"https:\/\/x.com\/siteground\",\"https:\/\/www.instagram.com\/siteground\/\",\"https:\/\/www.youtube.com\/@siteground\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390\",\"name\":\"Hristo Pandjarov\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g\",\"caption\":\"Hristo Pandjarov\"},\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/\"],\"url\":\"https:\/\/newblog.siteground.com\/en\/author\/hristo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Jetpack Critical Vulnerability Fixed on SiteGround Servers : SiteGround Blog","description":"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/","og_locale":"en_US","og_type":"article","og_title":"Jetpack Critical Vulnerability Fixed on SiteGround Servers","og_description":"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.","og_url":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/","og_site_name":"SiteGround","article_publisher":"https:\/\/www.facebook.com\/siteground","article_published_time":"2014-04-11T10:33:06+00:00","article_modified_time":"2025-09-18T14:49:24+00:00","og_image":[{"width":540,"height":294,"url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg","type":"image\/jpeg"}],"author":"Hristo Pandjarov","twitter_card":"summary_large_image","twitter_creator":"@siteground","twitter_site":"@siteground","twitter_misc":{"Written by":"Hristo Pandjarov","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#article","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/"},"author":{"name":"Hristo Pandjarov","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390"},"headline":"Jetpack Critical Vulnerability Fixed on SiteGround Servers","datePublished":"2014-04-11T10:33:06+00:00","dateModified":"2025-09-18T14:49:24+00:00","mainEntityOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/"},"wordCount":222,"commentCount":0,"publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg","articleSection":["Hosting Insights","Product Updates","Security","WordPress"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/","url":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/","name":"Jetpack Critical Vulnerability Fixed on SiteGround Servers : SiteGround Blog","isPartOf":{"@id":"https:\/\/newblog.siteground.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage"},"thumbnailUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg","datePublished":"2014-04-11T10:33:06+00:00","dateModified":"2025-09-18T14:49:24+00:00","description":"Yesterday, on April 10th, a critical security flaw in the popular Jetpack plugin was made public in an official statement&nbsp;by the Jetpack developers.","breadcrumb":{"@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#primaryimage","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2015\/04\/jetpack.jpg","width":540,"height":294},{"@type":"BreadcrumbList","@id":"https:\/\/newblog.siteground.com\/en\/jetpack-critical-vulnerability-fixed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/newblog.siteground.com\/en\/"},{"@type":"ListItem","position":2,"name":"Jetpack Critical Vulnerability Fixed on SiteGround Servers"}]},{"@type":"WebSite","@id":"https:\/\/newblog.siteground.com\/en\/#website","url":"https:\/\/newblog.siteground.com\/en\/","name":"SiteGround Blog","description":"","publisher":{"@id":"https:\/\/newblog.siteground.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/newblog.siteground.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/newblog.siteground.com\/en\/#organization","name":"SiteGround Blog","url":"https:\/\/newblog.siteground.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","contentUrl":"https:\/\/newblog.siteground.com\/en\/wp-content\/uploads\/sites\/2\/2025\/01\/Siteground-Logo-on-white.jpg","width":1200,"height":400,"caption":"SiteGround Blog"},"image":{"@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/siteground","https:\/\/x.com\/siteground","https:\/\/www.instagram.com\/siteground\/","https:\/\/www.youtube.com\/@siteground"]},{"@type":"Person","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/ac3e1be52d672a8747613b4fa6808390","name":"Hristo Pandjarov","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/newblog.siteground.com\/en\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/e7d38ccbb1776eaf1c34c8453bdc6de1?s=96&d=mm&r=g","caption":"Hristo Pandjarov"},"sameAs":["https:\/\/www.linkedin.com\/in\/hristo-pandjarov-05194841\/"],"url":"https:\/\/newblog.siteground.com\/en\/author\/hristo\/"}]}},"_links":{"self":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/comments?post=6673"}],"version-history":[{"count":4,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6673\/revisions"}],"predecessor-version":[{"id":19851,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/posts\/6673\/revisions\/19851"}],"wp:attachment":[{"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/media?parent=6673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/categories?post=6673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newblog.siteground.com\/en\/wp-json\/wp\/v2\/tags?post=6673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}