How many automattic Newspack Newsletters CVEs are in CISA KEV?

None of automattic Newspack Newsletters's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of automattic Newspack Newsletters are affected?

10 distinct automattic Newspack Newsletters versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in automattic Newspack Newsletters CVEs?

automattic Newspack Newsletters's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).

How many critical automattic Newspack Newsletters vulnerabilities are there?

automattic Newspack Newsletters has 1 critical and 1 high-severity CVEs.

What is the average severity of automattic Newspack Newsletters CVEs?

The average CVSS base score across automattic Newspack Newsletters's scored CVEs is 6.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

automattic

5 CVEs

automattic Newspack Newsletters Vulnerabilities

Name: automattic Newspack Newsletters vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Newspack Newsletters by automattic.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.3

Avg CVSS

2024–2025

Last updated June 6, 2025

Overview

automattic Newspack Newsletters has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting automattic Newspack Newsletters, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of automattic Newspack Newsletters's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High1

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of automattic Newspack Newsletters's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No automattic Newspack Newsletters CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every automattic Newspack Newsletters version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.13.22 CVEs
<= 3.0.82 CVEs
>= 2.13.32 CVEs
<= 3.13.01 CVE
>= 3.14.01 CVE

Fixed in

> 2.13.22 CVEs
> 3.0.82 CVEs
2.13.32 CVEs
> 3.13.01 CVE
3.14.01 CVE

Find a version

5 CVEs

Sort

WordPress Newspack Newsletters plugin <= 3.13.0 - Open Redirection Vulnerability
CVE-2025-49325
Patch
CWE-601
Medium · CVSS 4.7
EPSS 0.3% (18th pct)2025-06-06
WordPress Newspack Newsletters plugin <= 2.13.2 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-37242
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2025-01-02
WordPress Newspack Newsletters plugin <= 2.13.2 - Broken Access Control vulnerability
CVE-2024-37475
Patch
CWE-862
Medium · CVSS 5.3
EPSS 0.4% (34th pct)2024-11-01
WordPress Newspack Blocks plugin <= 3.0.8 - Sensitive Data Exposure vulnerability
CVE-2024-37115
Patch
CWE-200
High · CVSS 7.5
EPSS 0.6% (43th pct)2024-07-10
WordPress Newspack Blocks plugin <= 3.0.8 - Arbitrary File Upload vulnerability
CVE-2024-37424
Patch
CWE-434
Critical · CVSS 9.9
EPSS 0.5% (39th pct)2024-07-09

Common weakness types

The CWE weakness categories most often found in automattic Newspack Newsletters CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many automattic Newspack Newsletters CVEs were published each year.

2024

3

2025

2

Other automattic products

Browse vulnerabilities for other products by automattic.

jetpack18 CVEs WooCommerce16 CVEs sensei lms8 CVEs activitypub6 CVEs mongoose6 CVEs sensei6 CVEs wp super cache6 CVEs jetpack crm5 CVEs

All automattic vulnerabilities

Frequently asked questions

Common questions about automattic Newspack Newsletters vulnerabilities.

How many CVEs does automattic Newspack Newsletters have?: automattic Newspack Newsletters has 5 published CVE records since 2024.
How many automattic Newspack Newsletters CVEs are in CISA KEV?: None of automattic Newspack Newsletters's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for automattic Newspack Newsletters vulnerabilities?: No automattic Newspack Newsletters CVEs currently have a tracked public exploit in this dataset.
Which versions of automattic Newspack Newsletters are affected?: 10 distinct automattic Newspack Newsletters versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in automattic Newspack Newsletters CVEs?: automattic Newspack Newsletters's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type), CWE-601 (URL Redirection to Untrusted Site ('Open Redirect')).
How many critical automattic Newspack Newsletters vulnerabilities are there?: automattic Newspack Newsletters has 1 critical and 1 high-severity CVEs.
What is the average severity of automattic Newspack Newsletters CVEs?: The average CVSS base score across automattic Newspack Newsletters's scored CVEs is 6.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track automattic Newspack Newsletters vulnerabilities

Monitor new automattic Newspack Newsletters vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing