Skip to contentEric Teubert Podlove Podcast Publisher vulnerabilities
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic WebhookCVE-2026-937757.2 High
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' ParameterCVE-2026-759666.4 Medium
- eric teubert podlove podcast publisherWordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-666157.1 High
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' ParameterCVE-2026-160998.8 High
- eric teubert podlove podcast publisherPodlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRFCVE-2026-137294.3 Medium
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url ParameterCVE-2026-13001Public exploit9.8 Critical
- eric teubert podlove podcast publisherWordPress Podlove Podcast Publisher plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-324486.5 Medium
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File UploadCVE-2025-10147Public exploit9.8 Critical
- eric teubert podlove podcast publisherWordPress Podlove Podcast Publisher Plugin <= 4.2.5 - Open Redirection VulnerabilityCVE-2025-582044.7 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher < 4.2.1 - Admin+ Stored XSSCVE-2024-137304.8 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher < 4.1.24 - Admin+ Stored XSSCVE-2024-137294.8 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete FunctionCVE-2025-13834.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed NameCVE-2025-05544.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerabilityCVE-2024-523939.1 Critical
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerabilityCVE-2024-439849.6 Critical
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-439836.5 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerabilityCVE-2024-321434.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerabilityCVE-2024-327127.5 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-328125.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerabilityCVE-2024-321398.5 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-299157.1 High
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data ExportCVE-2024-11095.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings ImportCVE-2024-11105.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-254724.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-250465.9 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher < 3.5.6 - Unauthenticated SQL InjectionCVE-2021-246669.8 Critical