Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how podlove compares to other vendors in security performance

View Risk Score →

podlove Podcast PublisherPodlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter

Risk 79
Severity
8.8
First published (updated )
CVE-2026-16099

podlove Podcast PublisherPodlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF

Risk 22
Severity
4.3
First published (updated )
CVE-2026-13729

podlove Podlove Podcast PublisherPodlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

Risk 86
Severity
9.8
First published (updated )
CVE-2026-13001

podlove Web PlayerWordPress Podlove Web Player plugin <= 5.9.1 - Broken Access Control vulnerability

Risk 46
Severity
9.8
First published (updated )
CVE-2025-62908

podlove Podcast PublisherPodlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

Risk 86
Severity
9.8
First published (updated )
CVE-2025-10147
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

podlove Podcast PublisherPodlove Podcast Publisher < 4.1.24 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13729

podlove Podcast PublisherPodlove Podcast Publisher < 4.2.1 - Admin+ Stored XSS

Risk 29
Severity
4.8
First published (updated )
CVE-2024-13730

podlove Podcast PublisherPodlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function

Risk 22
Severity
4.3
First published (updated )
CVE-2025-1383

podlove Podcast PublisherPodlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name

Risk 21
Severity
4.4
EPSS
0.04%
First published (updated )
CVE-2025-0554

podlove Podcast PublisherWordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability

Risk 66
Severity
9.1
First published (updated )
CVE-2024-52393
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.1.13 - CSRF to Remote Code Execution (RCE) vulnerability

Risk 80
Severity
9.6
First published (updated )
CVE-2024-43984

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.1.13 - Cross Site Scripting (XSS) vulnerability

Risk 46
Severity
6.5
First published (updated )
CVE-2024-43983

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.1.0 - Broken Access Control vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2024-32143

podlove Podlove Web PlayerWordPress Podlove Web Player plugin <= 5.7.3 - Sensitive Data Exposure vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-35710

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.0.14 - Broken Access Control vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2024-32712
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.0.11 - Server Side Request Forgery (SSRF) vulnerability

Risk 25
Severity
5.4
EPSS
0.04%
First published (updated )
CVE-2024-32812

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher plugin <= 4.0.12 - SQL Injection vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2024-32139

podlove Podlove Web PlayerWordPress Podlove Web Player plugin <= 5.7.1 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
EPSS
0.04%
First published (updated )
CVE-2024-29788

podlove Podlove Podcast PublisherWordPress Podlove Podcast Publisher plugin <= 4.0.9 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2024-29915

podlove Podlove Podcast Publisher WordPressPodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export

Risk 27
Severity
5.3
First published (updated )
CVE-2024-1109
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

podlove Podlove Subscribe Button WordpressPodlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2024-1118

podlove Podlove Podcast Publisher WordPressPodlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import

Risk 27
Severity
5.3
First published (updated )
CVE-2024-1110

podlove Podlove Subscribe Button WordpressWordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)

Risk 77
Severity
8.8
First published (updated )
CVE-2023-25481

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)

Risk 77
Severity
8.8
First published (updated )
CVE-2023-25472

podlove Podlove Subscribe Button WordpressWordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )
CVE-2023-25479
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

podlove Podlove Podcast Publisher WordPressWordPress Podlove Podcast Publisher Plugin <= 3.8.2 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )
CVE-2023-25046

podlove Podlove Podcast Publisher WordPressPodlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2021-24666

podlove Podlove Podcast Publisher WordPressSQL Injection, CSRF

Risk 86
Severity
9.8
First published (updated )
CVE-2016-10942

podlove Podlove Podcast Publisher WordPressXSS, CSRF

Risk 38
Severity
6.1
First published (updated )
CVE-2016-10941

podlove Podlove Podcast PublisherSQL Injection, CSRF

Risk 79
Severity
8.8
First published (updated )
CVE-2017-12949
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203