Vulnerabilities

TI-2024-21216 CVE-2024-32141 · GHSA-78gf-r26x-xrjg

WordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through <= 1.4.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00214 Published 2024-04-15 No fix listed CWE-352

TI-2024-21215 CVE-2024-32140 · GHSA-gfwx-97cp-vqxm

WordPress Libsyn Publisher Hub plugin <= 1.4.4 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in libsyn Libsyn Publisher Hub libsyn-podcasting.This issue affects Libsyn Publisher Hub: from n/a through <= 1.4.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00331 Published 2024-04-15 No fix listed CWE-79

TI-2023-10529 CVE-2023-25057 · GHSA-vfh3-2mj3-hwx3

WordPress Libsyn Publisher Hub Plugin <= 1.3.2 is vulnerable to Sensitive Data Exposure

LOW 25

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Libsyn Libsyn Publisher Hub.This issue affects Libsyn Publisher Hub: from n/a through 1.3.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00623 Published 2023-11-30 No fix listed CWE-200

TI-2023-24594 CVE-2023-45834 · GHSA-w8h8-rjcr-f483

WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure

LOW 25

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Libsyn Libsyn Publisher Hub.This issue affects Libsyn Publisher Hub: from n/a through 1.4.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00616 Published 2023-11-30 No fix listed CWE-200

TI-2023-24595 CVE-2023-45835 · GHSA-7549-5fpf-mgv9

WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)

LOW 32

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Libsyn Libsyn Publisher Hub plugin <= 1.4.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00527 Published 2023-10-24 No fix listed CWE-79