Podlove vulnerabilities

Products

• Podcast Publisher 20
• Podcast Publisher 9
• Subscribe Button 3
• Subscribe Button 2
• Web Player 2

Newest

• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS CVE-2024-13730 4.8 MediumMay 15, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS CVE-2024-13729 4.8 MediumMay 15, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function CVE-2025-1383 4.3 MediumMarch 6, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name CVE-2025-0554 4.4 MediumJanuary 18, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability CVE-2024-52393 9.1 CriticalNovember 14, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability CVE-2024-43984 9.6 CriticalOctober 31, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-43983 6.5 MediumSeptember 17, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability CVE-2024-32143 4.3 MediumJune 11, 2024
• gerritvanaaken podlove web player, podlove web player +1 more WordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability CVE-2024-35710 5.3 MediumJune 8, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability CVE-2024-32712 7.5 HighMay 9, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-32812 5.4 MediumApril 24, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerability CVE-2024-32139 8.5 HighApril 15, 2024
• gerritvanaaken podlove web player, podlove web player +1 more WordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-29788 6.5 MediumMarch 27, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-29915 7.1 HighMarch 27, 2024
• alexander lueken podlove subscribe button, podlove subscribe button +1 more Podlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection CVE-2024-1118 8.8 HighFebruary 7, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export CVE-2024-1109 5.3 MediumFebruary 7, 2024
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import CVE-2024-1110 5.3 MediumFebruary 7, 2024
• alexander lueken podlove subscribe button, podlove subscribe button +1 more WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25481 5.4 MediumMay 23, 2023
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25472 4.3 MediumMay 23, 2023
• alexander lueken podlove subscribe button, podlove subscribe button +1 more WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25479 5.9 MediumApril 25, 2023
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-25046 5.9 MediumApril 7, 2023
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection CVE-2021-24666 9.8 CriticalSeptember 27, 2021
• podlove podcast publisher The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection... CVE-2016-10942 9.8 CriticalSeptember 13, 2019
• podlove podcast publisher The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS... CVE-2016-10941 6.1 MediumSeptember 13, 2019
• podlove podcast publisher lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3... CVE-2017-12949 8.8 HighAugust 18, 2017