Skip to content

Known vulnerabilities in Automattic newspack_newsletters

Is your version affected?

CVE Summary Score Published
CVE-2024-37475 Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly… 5.3 Medium Nov 1, 2024
CVE-2024-37115 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue… 7.5 High Jul 10, 2024
CVE-2024-37424 Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to… 9.9 Critical Jul 9, 2024

Other Automattic products