Skip to content
OpenAdvisories

Vendor

SecondLineThemes

3 known vulnerabilities.

Products

Podcast Importer SecondLine 1 Podcast Subscribe Buttons 1 Auto YouTube Importer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-94682

    WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 versions.

    SecondLineThemes Podcast Importer SecondLine
  • Medium 6.4
    CVE-2023-5308

    Podcast Subscribe Buttons <= 1.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Podcast Subscribe Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'podcast_subscribe' shortcode in versions up to, and including, 1.4.8 due to insufficient input sanitization and output escaping on user supplied attributes. T…

    SecondLineThemes Podcast Subscribe Buttons Web / CMS
  • Medium 5.4
    CVE-2023-23797

    WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions.

    SecondLineThemes Auto YouTube Importer