Podlove

Products

ProductCVEsExploitedLatest
Podlove Podcast Publisher9–Oct 31, 2024
Podlove Subscribe button2–May 23, 2023
Podlove Web Player2–Jun 8, 2024

Exploited and recent CVEs

  • CVE-2024-43984 Critical 9.6 WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability 0.3%
  • CVE-2024-43983 Medium 6.5 WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-32143 Medium 4.3 WordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability 0.4%
  • CVE-2024-35710 Medium 5.3 WordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-32712 High 7.5 WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability 0.5%
  • CVE-2024-32812 Medium 5.4 WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability 0.4%
  • CVE-2024-32139 High 8.5 WordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerability 1.0%
  • CVE-2024-29788 Medium 6.5 WordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-29915 High 7.1 WordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-25481 Medium 5.4 WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-25472 Medium 4.3 WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-25479 Medium 5.9 WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-25046 Medium 5.9 WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS) 0.4%