Automattic Newspack Newsletters Open Redirect Vulnerability

A URL redirection vulnerability allowing untrusted site redirection (open redirect) has been identified in the Automattic Newspack Newsletters plugin, affecting versions through 3.13.0. This vulnerability could be exploited for phishing attacks by redirecting users to malicious sites.

Impact

Exploitation of this vulnerability could lead to phishing incidents, as users could be redirected from a legitimate site to a malicious one.

Remediation

Users of the Newspack Newsletters plugin should update to version 3.14.0 or later to address this vulnerability.