Advisories · Technology

Podlove Podcast Publisher.

Every CVE that names Podlove Podcast Publisher among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-13729 CVE record

CVSS 4.3 Medium

Podlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF
- Podlove Podcast Publisher
- Cross-site request forgery (CSRF)
Not analysed yet 1 Aug 2026
CVE-2024-13730 CVE record

CVSS 4.8 Medium

Podlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS
- Podlove Podcast Publisher
Not analysed yet 15 May 2025
CVE-2024-13729 CVE record

CVSS 4.8 Medium

Podlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS
- Podlove Podcast Publisher
Not analysed yet 15 May 2025
CVE-2024-43984 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

WordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability
- Podlove Podcast Publisher
- Cross-site request forgery (CSRF)
Not analysed yet 31 Oct 2024
CVE-2024-43983 CVE record

CVSS 6.5 Medium

WordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability
- Podlove Podcast Publisher
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2024
CVE-2024-32143 CVE record

CVSS 4.3 Medium

WordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability
- Podlove Podcast Publisher
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-32712 CVE record

CVSS 7.5 High

WordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability
- Podlove Podcast Publisher
- Broken access control
Not analysed yet 9 May 2024
CVE-2024-32812 CVE record

CVSS 5.4 Medium

WordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability
- Podlove Podcast Publisher
- Server-side request forgery (SSRF)
Not analysed yet 24 Apr 2024
CVE-2024-32139 CVE record

CVSS 8.5 High

WordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerability
- Podlove Podcast Publisher
- SQL injection
Not analysed yet 15 Apr 2024
CVE-2024-29915 CVE record

CVSS 7.1 High

WordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability
- Podlove Podcast Publisher
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2023-25472 CVE record

CVSS 4.3 Medium

WordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)
- Podlove Podcast Publisher
- Cross-site request forgery (CSRF)
Not analysed yet 23 May 2023
CVE-2023-25046 CVE record

CVSS 5.9 Medium

WordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)
- Podlove Podcast Publisher
- Cross-site scripting (XSS)
Not analysed yet 7 Apr 2023
CVE-2021-24666 CVE record

Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection
- Podlove Podcast Publisher
- SQL injection
Not analysed yet 27 Sept 2021