Extension WordPress
Vulnérabilités Podlove Podcast Publisher, page 2
Cette page rassemble les failles publiées pour Podlove Podcast Publisher, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Podlove Podcast Publisher
24 fiches
Podlove Podcast Publisher <= 3.5.5 – Unauthenticated SQL Injection
The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P[\d]+), takes an 'id' and 'category' parameters as arguments. Both parameters can be used for…
[*, 3.5.6)
3.5.6
24/08/2021
Podlove Podcast Publisher <= 2.5.3 – Authenticated SQL Injection
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
[*, 2.6.0)
2.6.0
07/08/2017
Podlove Podcast Publisher < 2.3.16 – SQL Injection
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.
[*, 2.3.16)
2.3.16
14/12/2016
Podlove Podcast Publisher < 2.3.16 – Cross-Site Request Forgery to Cross-Site Scripting
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF.
[*, 2.3.16)
2.3.16
16/09/2016
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.