WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
podclankova-inzerce
Published
2025-01-16
Title
Podčlánková inzerce <= 2.4.0 - Reflected Cross-Site Scripting
Slug
podiant
Published
2024-09-24
Title
Podiant <= 1.1 - Unauthenticated Local File Inclusion
Slug
podlove-podcasting-plugin-for-wordpress
Published
2016-12-14
Title
Podlove Podcast Publisher <= 2.3.15 - Multiple SQLi & XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2017-08-07
Title
Podlove Podcast Publisher < 2.6.0 - Authenticated SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2021-08-24
Title
Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2023-02-03
Title
Podlove Podcast Publisher < 3.8.3 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2023-02-17
Title
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-02-06
Title
Podlove Podcast Publisher < 4.0.12 - Missing Authorization to Settings Import
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-02-06
Title
Podlove Podcast Publisher < 4.0.12 - Missing Authorization to Unauthenticated Data Export
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-03-25
Title
Podlove Podcast Publisher < 4.0.10 - Reflected Cross-Site Scripting
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-12
Title
Podlove Podcast Publisher < 4.0.14 - Authenticated (Contributor+) SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-12
Title
Podlove Podcast Publisher < 4.1.1 - Missing Authorization
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-22
Title
Podlove Podcast Publisher < 4.0.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-22
Title
Podlove Podcast Publisher < 4.0.15 - Cross-Site Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-08-28
Title
Podlove Podcast Publisher < 4.1.14 - Cross-Site Request Forgery to Remote Code Execution
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-08-28
Title
Podlove Podcast Publisher < 4.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-11
Title
Podlove Podcast Publisher < 4.1.17 - Authenticated (Admin+) Remote Code Execution
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-01-17
Title
Podlove Podcast Publisher < 4.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-28
Title
Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-11-28
Title
Podlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-03-05
Title
Podlove Podcast Publisher < 4.2.3 - Cross-Site Request Forgery via ajax_transcript_delete Function
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-08-27
Title
Podlove Podcast Publisher < 4.2.6 - Open Redirect
Slug
podlove-podcasting-plugin-for-wordpress
Published
2025-09-22
Title
Podlove Podcast Publisher < 4.2.7 - Unauthenticated Arbitrary File Upload
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Admin+ Stored XSS
Slug
podlove-subscribe-button
Published
2023-02-15
Title
Podlove Subscribe button < 1.3.9 - Multiple CSRF