WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-08-28
Title
Podlove Podcast Publisher < 4.1.14 - Cross-Site Request Forgery to Remote Code Execution
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-08-28
Title
Podlove Podcast Publisher < 4.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-11
Title
Podlove Podcast Publisher < 4.1.17 - Authenticated (Admin+) Remote Code Execution
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-01-17
Title
Podlove Podcast Publisher < 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-28
Title
Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-28
Title
Podlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-03-05
Title
Podlove Podcast Publisher < 4.2.3 - Cross-Site Request Forgery via ajax_transcript_delete Function
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-08-27
Title
Podlove Podcast Publisher < 4.2.6 - Open Redirect
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-09-22
Title
Podlove Podcast Publisher < 4.2.7 - Unauthenticated Arbitrary File Upload
Slug
podlove-podcasting-plugin-for-wordpress
Published
2026-03-08
Title
Podlove Podcast Publisher < 4.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Admin+ Stored XSS
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Multiple CSRF
Slug
podlove-subscribe-button
Published
2024-02-06
Title
Podlove Subscribe button < 1.3.11 - Authenticated (Contributor+) SQL Injection
Slug
podlove-subscribe-button
Published
2025-09-22
Title
Podlove Subscribe button < 1.3.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-web-player
Published
2024-03-25
Title
Podlove Web Player < 5.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-web-player
Published
2024-06-06
Title
Podlove Web Player < 5.7.4 - Missing Authorization to Unauthenticated Information Exposure
Slug
podlove-web-player
Published
2026-03-03
Title
Podlove Web Player < 5.9.2 - Authenticated (Contributor+) PHP Object Injection
Slug
podpress
Published
2014-08-01
Title
podPress 8.8.10.13 - players/1pixelout/1pixelout_player.swf playerID Parameter XSS
Slug
pods
Published
2015-01-12
Title
Pods < 2.5 - Authenticated XSS & CSRF
Slug
pods
Published
2015-03-16
Title
Pods 1.4.7 <= 2.5.1.1 - Blind SQL Injection
Slug
pods
Published
2021-01-15
Title
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2021-01-15
Title
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2021-08-06
Title
Pods < 2.7.29 - Multiple Authenticated Stored Cross-Site Scripting (XSS)
Slug
pods
Published
2023-01-20
Title
Pods < 2.9.11 - Pods Deletion via CSRF
Slug
pods
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting