Skip to contentEteubert Podlove Podcast Publisher vulnerabilities
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic WebhookCVE-2026-937757.2 High
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' ParameterCVE-2026-759666.4 Medium
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' ParameterCVE-2026-160998.8 High
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url ParameterCVE-2026-13001Public exploit9.8 Critical
- eric teubert podlove podcast publisherPodlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File UploadCVE-2025-10147Public exploit9.8 Critical
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete FunctionCVE-2025-13834.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed NameCVE-2025-05544.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data ExportCVE-2024-11095.3 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 morePodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings ImportCVE-2024-11105.3 Medium