Skip to content
Sign in
4.3 Medium

CVE-2024-37242 Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross Site Request Forgery.This issue affects Newspack Newsletters: from n/a through <= 2.13.2.

Affected products and versions

Product Affected versions Fixed in
Newspack Newsletters 2.13 earliest → 2.13.2 No fix stated

Other CVEs of Newspack Newsletters

The 3 CVEs of Newspack Newsletters →
CVE-2025-49325 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters… 4.7 Medium CVE-2024-37475 Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly… 5.3 Medium
Track this CVE