plugin
3 known security issues reported for the Newspack Newsletters WordPress plugin. Most recent disclosed Jun 5, 2025.
Running Newspack Newsletters on your site? Check whether your installed version is affected.
Scan your site freeThe Newspack Newsletters plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 3.13.0. This is due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them i...
The Newspack Newsletters plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the api_content function in versions up to, and including, 2.13.2. This makes it possible for unauthenticated attackers to retrieve campaign information.
The Newspack Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.13.2. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform unauthorized actions via a forged request granted they can trick a sit...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free