Automattic Newspack vulnerabilities

• automattic newspack newsletters WordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection Vulnerability CVE-2025-49325 4.7 MediumJune 6, 2025
• automattic newspack newsletters WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-37242 4.3 MediumJanuary 2, 2025
• automattic newspack blocks WordPress Newspack Blocks plugin <= 3.0.8 - Broken Access Control vulnerability CVE-2024-37425 5.4 MediumNovember 1, 2024
• automattic newspack blocks WordPress Newspack Blocks plugin <= 3.0.8 - Contributor+ Arbitrary Directory Deletion vulnerability CVE-2024-37423 8.5 HighNovember 1, 2024
• automattic newspack newsletters WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability CVE-2024-37475 5.3 MediumNovember 1, 2024
• automattic newspack content converter WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability CVE-2024-37477 6.5 MediumNovember 1, 2024
• automattic newspack WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability CVE-2024-43968 4.3 MediumNovember 1, 2024
• automattic newspack blocks, newspack newsletters +1 more WordPress Newspack Blocks plugin <= 3.0.8 - Sensitive Data Exposure vulnerability CVE-2024-37115 7.5 HighJuly 10, 2024
• automattic newspack blocks, newspack newsletters +1 more WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability CVE-2024-37424 9.9 CriticalJuly 9, 2024
• automattic newspack ads WordPress Newspack Ads plugin <= 1.47.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-37474 6.5 MediumJuly 4, 2024
• automattic newspack campaigns, newspack popups +1 more WordPress Newspack Campaigns plugin <= 2.31.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-37476 6.5 MediumJuly 4, 2024