https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13730.htmlhttps://patchthecve.com/cve/CVE-2024-13730.htmlWed, 17 Jun 2026 07:02:37 +0000MEDIUM 4.8: The Podlove Podcast Publisher WordPress plugin before 4.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2024-13729.htmlhttps://patchthecve.com/cve/CVE-2024-13729.htmlWed, 17 Jun 2026 07:02:37 +0000MEDIUM 4.8: The Podlove Podcast Publisher WordPress plugin before 4.1.24 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).https://patchthecve.com/cve/CVE-2025-0554.htmlhttps://patchthecve.com/cve/CVE-2025-0554.htmlWed, 17 Jun 2026 08:26:41 +0000MEDIUM 4.4: The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed Name value in version <= 4.1.25 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbihttps://patchthecve.com/cve/CVE-2024-52393.htmlhttps://patchthecve.com/cve/CVE-2024-52393.htmlWed, 17 Jun 2026 08:07:08 +0000CRITICAL 9.1: Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.This issue affects Podlove Podcast Publisher: from n/a through <= 4.1.15.https://patchthecve.com/cve/CVE-2024-43984.htmlhttps://patchthecve.com/cve/CVE-2024-43984.htmlWed, 17 Jun 2026 07:52:06 +0000CRITICAL 9.6: Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13.https://patchthecve.com/cve/CVE-2024-43983.htmlhttps://patchthecve.com/cve/CVE-2024-43983.htmlWed, 17 Jun 2026 07:52:06 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Podlove Podlove Podcast Publisher allows Stored XSS.This issue affects Podlove Podcast Publisher: from n/a through 4.1.13.