7.5
High
CVE-2024-37115 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue…
Description
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue affects Newspack Blocks: from n/a through 3.0.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Newspack Blocks 3.0 | earliest → 3.0.8 | No fix stated |
| newspack_newsletters 3.0 | earliest → 3.0.8 | No fix stated |
Other CVEs of Newspack Blocks
The 4 CVEs of Newspack Blocks →
CVE-2024-37423
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack…
8.5
High
CVE-2024-37425
Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly…
5.4
Medium
CVE-2024-37424
Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to…
9.9
Critical