Skip to content
Sign in
5.3 Medium

CVE-2024-37475 Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly…

Description

Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2.

Affected products and versions

Product Affected versions Fixed in
Newspack Newsletters 2.13 earliest → 2.13.2 No fix stated
newspack_newsletters 2.13 earliest → 2.13.2 No fix stated

Other CVEs of Newspack Newsletters

The 3 CVEs of Newspack Newsletters →
CVE-2025-49325 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters… 4.7 Medium CVE-2024-37242 Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross… 4.3 Medium
Track this CVE