Vulnerabilities

TI-2026-47286 CVE-2026-66615 · GHSA-85cf-gxpr-2gj4

WordPress Podlove Podcast Publisher plugin <= 4.5.4 - Cross Site Scripting (XSS) vulnerability

LOW 31

Unauthenticated Cross Site Scripting (XSS) in Podlove Podcast Publisher <= 4.5.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00251 Published 2026-08-20 No fix listed CWE-79

TI-2026-24976 CVE-2026-32448 · GHSA-hqpr-9vfh-4vgr

WordPress Podlove Podcast Publisher plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress allows Stored XSS.This issue affects Po…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00138 Published 2026-03-13 No fix listed CWE-79

TI-2025-36009 CVE-2025-58204 · GHSA-gg8p-mmgc-354v

WordPress Podlove Podcast Publisher Plugin <= 4.2.5 - Open Redirection Vulnerability

LOW 21

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress allows Phishing.This issue affects Podlove Podcast Publisher: from n/a t…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0021 Published 2025-08-27 No fix listed CWE-601

TI-2024-35916 CVE-2024-53718 · GHSA-9xfx-m8f5-3ch7

WordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Multi Feed Reader multi-feed-reader allows Stored XSS.This issue affects Multi Feed Reader: from n/a through <= 2.2.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00173 Published 2024-12-02 No fix listed CWE-352

TI-2024-35064 CVE-2024-52393 · GHSA-x7gr-mmjj-hx3h

WordPress Podlove Podcast Publisher plugin <= 4.1.15 - Admin+ Remote Code Execution (RCE) vulnerability

MEDIUM 42

Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.This issue affects Podlove Podcast Publisher: from n/a through <= 4.1.15.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00528 Published 2024-11-14 No fix listed CWE-82

TI-2024-01686 CVE-2024-1810 · GHSA-5c26-p6wq-x24p

Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting

LOW 27

The Archivist – Custom Archive Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘shortcode_attributes' parameter in all versions up to, and including, 1.7.5 due to insufficient input…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00374 Published 2024-02-24 No fix listed CWE-79

TI-2023-24821 CVE-2023-46194 · GHSA-rqg9-5q92-2pv6

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.5 versions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0034 Published 2023-10-27 No fix listed CWE-79

TI-2023-10758 CVE-2023-25448 · GHSA-8gq4-c6jq-wcqr

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-05-22 No fix listed CWE-352

TI-2023-10800 CVE-2023-25490 · GHSA-cmm9-j99w-8844

WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79

TI-2017-01495 CVE-2017-2195 · GHSA-pgh8-rrxq-qpwf

SQL injection in Eric Teubert Multi Feed Reader

MEDIUM 41

SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01617 Published 2017-06-09 No fix listed CWE-89

Vulnerabilities

Filters