PP
Product
Podlove Podcast Publisher
9
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 2Medium 5Low 0
Watch
Add Podlove Podcast Publisher to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75966 | 6.4 | Sep 9 | Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter Affected: through 4.5.5 |
| CVE-2024-1109 | 5.3 | Feb 7 | Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export Affected: through 4.0.11 |
| CVE-2024-1110 | 5.3 | Feb 7 | Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import Affected: through 4.0.11 |
| CVE-2025-1383 | 4.3 | Mar 6 | Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function Affected: through 4.2.2 |
| CVE-2025-0554 | 4.0 | Jan 18 | Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name Affected: through 4.1.25 |
Showing 5