Skip to content
OpenAdvisories

Vendor

eteubert

10 known vulnerabilities.

Products

Podlove Podcast Publisher 9 Archivist – Custom Archive Templates 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-93775

    Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthentic…

    eteubert Podlove Podcast Publisher Web / CMS
  • High 8.8
    CVE-2026-16099

    Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_link_item function in all versions up to, and including, 4.5.3. This makes it possible for authenticated attacke…

    eteubert Podlove Podcast Publisher Web / CMS