CVE-2024-37424

Severity

CRITICAL

CVSS

9.9

EPSS

0.00566

Risk score

39.8

CISA KEV

PoC

Published

2024-07-09

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2024-36654, GHSA-RFXF-VP7H-9PJM

Products

Automattic:Newspack Blocks n/a ≤3.0.8

Sources

euvd EUVD-2024-36654

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Automattic Newspack Blocks allows Upload a Web Shell to a Web Server.This issue affects Newspack Blocks: from n/a through 3.0.8.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-36654
https://patchstack.com/database/vulnerability/newspack-blocks/wordpress-newspack-blocks-plugin-3-0-8-arbitrary-file-upload-vulnerability?_s_id=cve