Unknown Cas vulnerabilities

• unknown casso flow Casso Auto-confirm Bank Transfer < 4.2.0 - Unauthenticated WooCommerce Order Payment Confirmation CVE-2026-103382 5.3 MediumOctober 28, 2026
• blubrry powerpress podcasting plugin by blubrry PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects CVE-2026-97354 4.1 MediumOctober 7, 2026
• blubrry powerpress podcasting plugin by blubrry PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block CVE-2026-97319 6.8 MediumSeptember 27, 2026
• secondlinethemes podcast importer secondline WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-94682 6.5 MediumSeptember 23, 2026
• blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL CVE-2026-16294 7.1 HighAugust 12, 2026
• unknown podcast player Podcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery CVE-2026-14860 5.3 MediumAugust 10, 2026
• blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL CVE-2026-16293 6.8 MediumAugust 4, 2026
• eric teubert podlove podcast publisher Podlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF CVE-2026-13729 4.3 MediumAugust 1, 2026
• unknown creta testimonial showcase Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion CVE-2025-10686 7.2 HighNovember 14, 2025
• unknown team members showcase Team Members Showcase < 3.5.0 - Reflected XSS CVE-2025-11560 7.1 HighNovember 12, 2025
• blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.9.18 - Author+ XSS CVE-2024-9227 4.8 MediumMay 15, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS CVE-2024-13730 4.8 MediumMay 15, 2025
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS CVE-2024-13729 4.8 MediumMay 15, 2025
• blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL CVE-2024-9230 5.9 MediumApril 14, 2025
• castos seriously simple podcasting Seriously Simple Podcasting < 3.3.0 - Admin+ Stored XSS CVE-2024-3751 4.8 MediumJuly 13, 2024
• apereo cas, central authentication service +1 more CAS <= 1.0.0 - Unauthenticated SSRF CVE-2024-4399 9.1 CriticalMay 23, 2024
• apereo cas CAS <= 1.0.0 - Unauthenticated Arbitrary File Access CVE-2024-4388 7.5 HighMay 23, 2024
• castos seriously simple podcasting Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure CVE-2023-6444 Public exploit 5.3 MediumMarch 11, 2024
• blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS CVE-2023-4820 5.4 MediumOctober 16, 2023
• gsplugins gs books showcase GS Books Showcase < 1.3.1 - Contributor+ Stored XSS CVE-2023-0541 5.4 MediumFebruary 21, 2023
• castos seriously simple podcasting Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS CVE-2022-4571 5.4 MediumJanuary 16, 2023
• radiustheme team - wordpress team members showcase, unknown team – wordpress team members showcase plugin +1 more WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion CVE-2022-2557 8.8 HighAugust 22, 2022
• secondlinethemes podcast importer secondline Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi CVE-2022-1023 7.2 HighApril 11, 2022
• infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 more Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF CVE-2021-24913 4.3 MediumFebruary 28, 2022
• infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 more Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update CVE-2021-24730 4.3 MediumFebruary 28, 2022
• shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 more Logo Carousel < 3.4.2 - Unauthorised Private Post Access CVE-2021-24739 8.1 HighDecember 21, 2021
• shapedplugin logo carousel, unknown logo carousel – logo slider, logo showcase, and clients logo gallery +1 more Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting CVE-2021-24738 5.4 MediumDecember 21, 2021
• infornweb logo showcase with slick slider, unknown logo showcase with slick slider – logo carousel, logo slider & logo grid +1 more Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting CVE-2021-24729 5.4 MediumNovember 23, 2021
• radiustheme logo slider and showcase Logo Slider and Showcase < 1.3.37 - Editor Plugin's Settings Update CVE-2021-24742 6.5 MediumNovember 1, 2021
• sonaar mp3 audio player for music, radio & podcast by sonaar, mp3 audio player for music\, radio \& podcast +1 more MP3 Audio Player for Music, Radio & Podcast by Sonaar < 2.4.2 - Multiple Admin+ Cross Site Scripting CVE-2021-24624 4.8 MediumNovember 1, 2021
• secondlinethemes podcast subscribe buttons Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS CVE-2021-24743 5.4 MediumOctober 18, 2021
• bplugins streamcast – radio player for wordpress, streamcast radio player +1 more StreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting CVE-2021-24416 5.4 MediumOctober 18, 2021
• eric teubert podlove podcast publisher, podlove podcast publisher +1 more Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection CVE-2021-24666 9.8 CriticalSeptember 27, 2021
• cashtomer project cashtomer Cashtomer <= 1.0.0 - Authenticated SQL Injection CVE-2021-24391 8.8 HighSeptember 6, 2021
• sauter-controls case suite An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter... CVE-2018-17912 7.5 HighNovember 2, 2018