Vulnerabilities / Podlove Podcast Publisher
Podlove Podcast Publisher vulnerabilities
Advisories WPSec published for Podlove Podcast Publisher. Other sources may list more. Its attack surface: Podlove Podcast Publisher on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-18 | WPSEC-2026-1216 | Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) Insecure Direct Object Reference to Episode and Shownotes Modification | Medium 5.4 | 4.5.4 |
| 2026-10-18 | WPSEC-2026-1215 | Podlove Podcast Publisher <= 4.5.3 - Unauthenticated Sensitive Information Exposure of Unpublished Episodes | Medium 5.3 | 4.5.4 |
| 2026-10-18 | WPSEC-2026-1214 | Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Contributor Name | Medium 6.4 | 4.5.4 |
| 2026-10-18 | WPSEC-2026-1213 | Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) Missing Authorization to Podcast Settings Modification | Medium 4.3 | 4.5.4 |
License: CC BY 4.0