Skip to content

Known vulnerabilities in Automattic Newspack Blocks

Is your version affected?

CVE Summary Score Published
CVE-2024-37425 Missing Authorization vulnerability in Automattic Newspack Blocks newspack-blocks allows Exploiting Incorrectly… 5.4 Medium Nov 1, 2024
CVE-2024-37423 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic Newspack… 8.5 High Nov 1, 2024
CVE-2024-37115 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue… 7.5 High Jul 10, 2024
CVE-2024-37424 Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to… 9.9 Critical Jul 9, 2024

Other Automattic products