Skip to content
OpenAdvisories

Vendor

Podlove

13 known vulnerabilities.

Products

Podlove Podcast Publisher 9 Podlove Web Player 2 Podlove Subscribe button 2
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2024-43983

    WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Podlove Podlove Podcast Publisher allows Stored XSS.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13.

    Podlove Podlove Podcast Publisher
  • Medium 4.3
    CVE-2024-32143

    WordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.1.0.

    Podlove Podlove Podcast Publisher
  • Medium 5.3
    CVE-2024-35710

    WordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Podlove Podlove Web Player.This issue affects Podlove Web Player: from n/a through 5.7.3.

    Podlove Podlove Web Player
  • Medium 5.4
    CVE-2024-32812

    WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11.

    Podlove Podlove Podcast Publisher
  • Medium 6.5
    CVE-2024-29788

    WordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Podlove Podlove Web Player allows Stored XSS.This issue affects Podlove Web Player: from n/a through 5.7.1.

    Podlove Podlove Web Player
  • Medium 5.4
    CVE-2023-25481

    WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions.

    Podlove Podlove Subscribe button
  • Medium 4.3
    CVE-2023-25472

    WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.3 versions.

    Podlove Podlove Podcast Publisher
  • Medium 5.9
    CVE-2023-25479

    WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions.

    Podlove Podlove Subscribe button
  • Medium 5.9
    CVE-2023-25046

    WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.2 versions.

    Podlove Podlove Podcast Publisher