cleantalk
Vulnerabilities and Security Researches

Newspack Newsletters, CVE-2025-49325

CVE, Research URL

CVE-2025-49325

Application

Newspack Newsletters

Published on
Jun 06, 2025
Research Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Automattic Newspack Newsletters allows Phishing. This issue affects Newspack Newsletters: from n/a through 3.13.0.
Affected versions
Min -, max 3.14.0.
Status
vulnerable