Skip to content
OpenAdvisories

Vendor

eteubert

10 known vulnerabilities.

Products

Podlove Podcast Publisher 9 Archivist – Custom Archive Templates 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-75966

    Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter in all versions up to, and including, 4.5.5 due to insufficient input sanitization and output escaping. This m…

    eteubert Podlove Podcast Publisher Web / CMS
  • Medium 4.3
    CVE-2025-1383

    Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajax_transcript_delete() function. This makes it possible f…

    eteubert Podlove Podcast Publisher Web / CMS
  • Medium 4.4
    CVE-2025-0554

    Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value in version <= 4.1.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with a…

    eteubert Podlove Podcast Publisher Web / CMS
  • Medium 6.1
    CVE-2024-1810

    Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting

    The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode_attributes' parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This…

    eteubert Archivist – Custom Archive Templates Web / CMS
  • Medium 5.3
    CVE-2024-1109

    Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the init_download() and init() functions in all versions up to, and including, 4.0.11. This makes it possible for unauthentica…

    eteubert Podlove Podcast Publisher Web / CMS
  • Medium 5.3
    CVE-2024-1110

    Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import

    The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the init() function in all versions up to, and including, 4.0.11. This makes it possible for unauthenticated attackers t…

    eteubert Podlove Podcast Publisher Web / CMS