Lucene search

Newspack Security Vulnerabilities

cve

CVE-2024-37115

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic Newspack Blocks.This issue affects Newspack Blocks: from n/a through 3.0.8.

7.5CVSS

7.5AI Score

0.0004EPSS

2024-07-10 06:15 PM

cve

CVE-2024-37424

Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8.

9.9CVSS

9.4AI Score

0.0004EPSS

2024-07-09 11:15 AM

cve

CVE-2024-37476

Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1.

6.5CVSS

6.1AI Score

0.0004EPSS

2024-07-04 06:15 PM