Description
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Podlove | Podlove Subscribe button | ≤ 1.3.7 | — |
Medium · 5.4
CVE-2023-25481
EUVD-2023-29436GHSA-44m5-fc9p-4q7r
WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack