Eeteubert

Products

Exploited and recent CVEs

• CVE-2026-93775 High 7.2 Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook 0.3%
• CVE-2026-75966 Medium 6.4 Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter 0.4%
• CVE-2026-16099 High 8.8 Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter 1.1%
• CVE-2026-13001 Critical 9.8 Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter 3.8%
• CVE-2025-10147 Critical 9.8 Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload 1.0%
• CVE-2025-1383 Medium 4.3 Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function 0.2%
• CVE-2025-0554 Medium 4.4 Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name 0.3%
• CVE-2024-1810 Medium 6.1 Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting 0.4%
• CVE-2024-1109 Medium 5.3 Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export 0.5%
• CVE-2024-1110 Medium 5.3 Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import 0.5%