Podlove Podcast Publisher
Eric Teubert
Developer
4.5.6
Latest version
3,000
Installations
No date
Last updated
Vulnerability history
0 present
27 patched
10 Mitigation rules
- Arbitrary File Upload vulnerability<= 4.5.13 days ago
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.5.54 days ago
- Cross Site Scripting (XSS) vulnerability<= 4.5.419/08/2026
- Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter vulnerability<= 4.5.318/08/2026
- Podcast Contributor/Group/Role Creation and Deletion vulnerability< 4.5.301/08/2026
- Cross Site Scripting (XSS) vulnerability<= 4.3.308/03/2026
- Unauthenticated Arbitrary File Upload vulnerability<= 4.2.622/09/2025
- Open Redirection Vulnerability<= 4.2.527/08/2025
- Admin+ Stored XSS vulnerability< 4.2.119/05/2025
- Admin+ Stored XSS vulnerability< 4.1.2419/05/2025
- Cross-Site Request Forgery via ajax_transcript_delete Function vulnerability<= 4.2.206/03/2025
- Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name vulnerability<= 4.1.2517/01/2025
- Admin+ Remote Code Execution (RCE) vulnerability<= 4.1.1511/11/2024
- CSRF to Remote Code Execution (RCE) vulnerability<= 4.1.1328/08/2024
- Cross Site Scripting (XSS) vulnerability<= 4.1.1328/08/2024
- Server Side Request Forgery (SSRF) vulnerability<= 4.0.1122/04/2024
- Broken Access Control vulnerability<= 4.0.1422/04/2024
- Broken Access Control vulnerability<= 4.1.012/04/2024
- SQL Injection vulnerability<= 4.0.1212/04/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.0.925/03/2024
- Missing Authorization to Unauthenticated Data Export vulnerability<= 4.0.1107/02/2024
- Missing Authorization to Settings Import vulnerability<= 4.0.1107/02/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 3.8.315/02/2023
- Cross Site Scripting (XSS)<= 3.8.203/02/2023
- SQL Injection (SQLi) vulnerability<= 3.6.024/08/2021
- SQL injection (SQLi) vulnerability<= 2.5.307/08/2017
- Multiple Vulnerabilities<= 2.3.1514/12/2016