WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pocket-widget
Published
2024-08-19
Title
Pocket Widget <= 0.1.3 - Admin+ Stored XSS
Slug
podamibe-twilio-private-call
Published
2025-01-16
Title
Podamibe Twilio Private Call <= 1.0.1 - Reflected Cross-Site Scripting
Slug
podcast-box
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
podcast-box
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
podcast-channels
Published
2014-04-25
Title
Podcast Channels < 0.28 - Unauthenticated Reflected XSS
Slug
podcast-feed-player-widget
Published
2025-06-27
Title
Podcast Feed Player Widget and Shortcode <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
podcast-importer-secondline
Published
2021-04-13
Title
Podcast Importer SecondLine < 1.1.5 - Server-Side Request Forgery (SSRF)
Slug
podcast-importer-secondline
Published
2022-03-21
Title
Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi
Slug
podcast-subscribe-buttons
Published
2021-09-15
Title
Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS
Slug
podcast-subscribe-buttons
Published
2023-10-03
Title
Podcast Subscribe Buttons < 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
podclankova-inzerce
Published
2025-01-16
Title
Podčlánková inzerce <= 2.4.0 - Reflected Cross-Site Scripting
Slug
podiant
Published
2024-09-24
Title
Podiant <= 1.1 - Unauthenticated Local File Inclusion
Slug
podigee
Published
2026-02-26
Title
Podigee <= 1.4.0 - Unauthenticated Sever-Side Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2016-12-14
Title
Podlove Podcast Publisher <= 2.3.15 - Multiple SQLi & XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2017-08-07
Title
Podlove Podcast Publisher < 2.6.0 - Authenticated SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2021-08-24
Title
Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2023-02-03
Title
Podlove Podcast Publisher < 3.8.3 - Admin+ Stored XSS
Slug
podlove-podcasting-plugin-for-wordpress
Published
2023-02-17
Title
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-02-06
Title
Podlove Podcast Publisher < 4.0.12 - Missing Authorization to Settings Import
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-02-06
Title
Podlove Podcast Publisher < 4.0.12 - Missing Authorization to Unauthenticated Data Export
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-03-25
Title
Podlove Podcast Publisher < 4.0.10 - Reflected Cross-Site Scripting
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-12
Title
Podlove Podcast Publisher < 4.0.14 - Authenticated (Contributor+) SQL Injection
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-12
Title
Podlove Podcast Publisher < 4.1.1 - Missing Authorization
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-22
Title
Podlove Podcast Publisher < 4.0.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
podlove-podcasting-plugin-for-wordpress
Published
2024-04-22
Title
Podlove Podcast Publisher < 4.0.15 - Cross-Site Request Forgery