108 matches found
CVE-2024-37475
CVE-2024-37475 is a Missing Authorization vulnerability in the WordPress plugin Newspack Newsletters (versions
CVE-2024-37475 WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2...
CVE-2024-37475 WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic Newspack Newsletters allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Newspack Newsletters: from n/a through 2.13.2...
CVE-2024-37477
CVE-2024-37477: WordPress plugin Newspack Content Converter (versions up to and including 0.1.5) contains a Missing Authorization (broken access control) vulnerability due to incorrectly configured access controls. The issue allows exploitation without sufficient privileges and is documented acro...
CVE-2024-37477 WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Content Converter: from n/a through 0.1.5...
CVE-2024-37477 WordPress Newspack Content Converter plugin <= 0.1.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in Automattic Newspack Content Converter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack Content Converter: from n/a through 0.1.5...
CVE-2024-43968 WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability
Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6...
CVE-2024-43968 WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability
Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6...
CVE-2024-43968
CVE-2024-43968 covers the WordPress Newspack plugin, affected up to version 3.8.6. The issue is classified as a Broken Access Control vulnerability caused by incorrectly configured access control security levels. A fix exists in version 3.8.7. Public disclosures in multiple sources (NVD listing w...
CVE-2024-43968 WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability
Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6...
PT-2024-27586 · Unknown · Newspack Content Converter
Name of the Vulnerable Software and Affected Versions: Newspack Content Converter versions 0.1.5 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions 0.1...
PT-2024-30830
Name of the Vulnerable Software and Affected Versions Newspack versions 3.8.6 and earlier Description The issue is related to a Broken Access Control vulnerability, which allows exploitation due to incorrectly configured access control security levels. Recommendations For versions 3.8.6 and...
WordPress plugin Newspack 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27540 · Automattic · Newspack Blocks
Name of the Vulnerable Software and Affected Versions: Automattic Newspack Blocks versions n/a through 3.0.8 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability allows Path Traversa...
WordPress plugin Newspack Blocks 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
WordPress plugin Newspack Blocks 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27584 · Unknown · Newspack Newsletters
Name of the Vulnerable Software and Affected Versions: Newspack Newsletters versions n/a through 2.13.2 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...
WordPress plugin Newspack Newsletters 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2024-27542 · Automattic · Newspack Blocks
Name of the Vulnerable Software and Affected Versions: Newspack Blocks versions through 3.0.8 Description: The issue is related to a Missing Authorization vulnerability in Automattic Newspack Blocks, which allows exploiting incorrectly configured access control security levels. Recommendations: F...
