JETPACK FIXES CRITICAL INFORMATION DISCLOSURE FLAW EXISTING SINCE 2016

Summary from the TLDR InfoSec newsletter

The Jetpack WordPress plugin has released a fix for a critical vulnerability that was discovered during an internal audit. The vulnerability allowed logged-in users to view forms that were submitted by other users. Automattic has released updates for 101 impacted versions of Jetpack and recommends updating immediately.