4.3
Moyenne
CVE-2026-13729 The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its…
Description
The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Podlove Podcast Publisher 4.5 | premières → < 4.5.3 | 4.5.3 |
Autres CVE de Podlove Podcast Publisher
Les 4 CVE de Podlove Podcast Publisher →
CVE-2024-13729
The Podlove Podcast Publisher WordPress plugin before 4.1.24 does not sanitise and escape some of its settings, which…
4.8
Moyenne
CVE-2024-13730
The Podlove Podcast Publisher WordPress plugin before 4.2.1 does not sanitise and escape some of its settings, which…
4.8
Moyenne
CVE-2021-24666
The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by…
Non notée