PatchTheCVEpodlove vulnerabilities
Recent CVEs affecting podlove products. 14 tracked.
podlove has 14 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-05-15. Highest priority: CVE-2024-32139 (score 45/100).
- CVE-2025-0554 MEDIUM 4.4 UPGRADE The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Feed N
- CVE-2024-52393 CRITICAL 9.1 UPGRADE Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-p
- CVE-2024-43984 CRITICAL 9.6 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.Thi
- CVE-2024-43983 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in P
- CVE-2024-32812 MEDIUM 5.4 UPGRADE Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlo
- CVE-2024-32712 HIGH 7.5 UPGRADE Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Pu
- CVE-2024-32143 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Pu
- CVE-2024-32139 HIGH 8.5 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Podlove
- CVE-2024-29915 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Podlove
- CVE-2024-1118 HIGH 8.8 UPGRADE The Podlove Subscribe button plugin for WordPress is vulnerable to UNION-based SQL Injection via the 'button'
- CVE-2024-1110 MEDIUM 5.3 UPGRADE The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized modification of data due to a
- CVE-2024-1109 MEDIUM 5.3 UPGRADE The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missi
- CVE-2024-13730 MEDIUM 4.8 UPGRADE The Podlove Podcast Publisher WordPress plugin before 4.2.1 does not sanitise and escape some of its settings,
- CVE-2024-13729 MEDIUM 4.8 UPGRADE The Podlove Podcast Publisher WordPress plugin before 4.1.24 does not sanitise and escape some of its settings
FAQ
How do I fix podlove vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is podlove being exploited right now?
None of the tracked podlove CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which podlove CVE should I patch first?
CVE-2024-32139 currently ranks highest (45/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Podlove .