Skip to content
OpenAdvisories

Vendor

eteubert

10 known vulnerabilities.

Products

Podlove Podcast Publisher 9 Archivist – Custom Archive Templates 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-13001 Public exploit

    Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlove_handle_cache_files' function in all versions up to, and including, 4.5.1. This makes it possible for unauthenticated…

    eteubert Podlove Podcast Publisher Web / CMS
  • Critical 9.8
    CVE-2025-10147 Public exploit

    Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'move_as_original_file' function in all versions up to, and including, 4.2.6. This makes it possible for unauthenticated atta…

    eteubert Podlove Podcast Publisher Web / CMS