Skip to content

Known vulnerabilities in Automattic Newspack Newsletters

Is your version affected?

CVE Summary Score Published
CVE-2025-49325 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters… 4.7 Medium Jun 6, 2025
CVE-2024-37242 Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross… 4.3 Medium Jan 2, 2025
CVE-2024-37475 Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly… 5.3 Medium Nov 1, 2024

Other Automattic products