CVE-2024-37476

MEDIO 5.4CVE-2024-37476 · Published 04/07/2024 · updated 17/06/2026

In breve

CVE-2024-37476 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda newspack popups (automattic).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.29%, superiore al 22.0% delle vulnerabilità.
Correzione: aggiornare a 2.31.2 o successiva.

Package	Affected versions	Patched versions
newspack popups automattic	`< 2.31.2`	`2.31.2`

Description

Cross Site Scripting (XSS) vulnerability in Automattic Newspack Campaigns allows Stored XSS.This issue affects Newspack Campaigns: from n/a through 2.31.1.

References

patchstack.com/database/vulnerability/newspack-popups/wordpress-newspack-campaigns-plugin-2-31-1-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free