{"id":"CVE-2017-20086","details":"A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.","modified":"2026-07-08T11:48:13.213666Z","published":"2022-06-23T05:15:07.560Z","references":[{"type":"ADVISORY","url":"https://vuldb.com/?id.97383"},{"type":"EVIDENCE","url":"http://seclists.org/fulldisclosure/2017/Feb/95"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/automattic/jetpack","events":[{"introduced":"690583486e5430b9c09db8c20675085aaa36f2e9"},{"last_affected":"690583486e5430b9c09db8c20675085aaa36f2e9"}],"database_specific":{"cpe":"cpe:2.3:a:automattic:vaultpress:1.8.4:*:*:*:*:wordpress:*:*","extracted_events":[{"introduced":"1.8.4"},{"last_affected":"1.8.4"}],"source":"CPE_STRING"}}],"versions":["1.8.4","plugins/jetpack-mu-wpcom@4.10.0","packages/wordads@0.2.52","packages/waf@0.11.11","packages/videopress@0.17.0","packages/sync@1.57.0","packages/status@1.18.4","packages/stats-admin@0.12.2","packages/search@0.38.8","packages/roles@1.4.25","packages/redirect@1.7.27","packages/publicize@0.36.1","packages/partner@1.7.25","packages/my-jetpack@3.5.0","packages/logo@1.6.3","packages/licensing@1.8.4","packages/lazy-images@2.2.0","packages/jitm@2.3.19","packages/jetpack-mu-wpcom@4.10.0","packages/ip@0.1.6","packages/import@0.7.4","packages/image-cdn@0.2.5","packages/identity-crisis@0.10.5","packages/forms@0.22.0","packages/connection@1.57.5","packages/config@1.15.4","packages/composer-plugin@1.1.14","packages/compat@1.7.7","packages/changelogger@3.3.9","packages/boost-speed-score@0.2.2","packages/boost-core@0.1.3","packages/blocks@1.6.0","packages/blaze@0.10.2","packages/backup@1.17.6","packages/autoloader@2.11.23","packages/assets@1.18.11","packages/admin-ui@0.2.23","packages/action-bar@0.1.27","packages/a8c-mc-stats@1.4.22","js-packages/shared-extension-utils@0.12.0","js-packages/publicize-components@0.38.0","js-packages/components@0.42.4","js-packages/boost-score-api@0.1.11","js-packages/ai-client@0.1.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-20086.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}