Automattic Newspack Newsletters vulnerabilities

3 vulnerabilities

Known vulnerabilities in Automattic Newspack Newsletters, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2025-49325automatticnewspack newsletters+1
EPSS score
0.33%
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Phishing.This issue affects Newspack Newsletters: from n/a through <= 3.13.0.4.3CVE-2024-37242automatticnewspack newsletters+1
EPSS score
0.20%
Cross-Site Request Forgery (CSRF) vulnerability in Automattic Newspack Newsletters newspack-newsletters allows Cross Site Request Forgery.This issue affects Newspack Newsletters: from n/a through <= 2.13.2.5.3CVE-2024-37475automatticnewspack newsletters+1
EPSS score
0.45%
Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2.