VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 1, 2024· Updated Apr 28, 2026

WordPress Newspack plugin < 3.8.7 - Broken Access Control vulnerability

CVE-2024-43968

Description

Broken Access Control vulnerability in Automattic Newspack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Newspack: from n/a through 3.8.6.

Affected products

2
  • Automattic/Newspackllm-create2 versions
    <=3.8.6+ 1 more
    • (no CPE)range: <=3.8.6
    • (no CPE)range: n/a

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.