Lucene search
K

285 matches found

Nuclei
Nuclei
added yesterday17 views

Seriously Simple Podcasting < 3.0.0 - Information Disclosure

The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address which by default is the admin email address via an unauthenticated crafted request. id: CVE-2023-6444 info: name: Seriously Simple Podcasting 3.0.0 - Information Disclosure author: s4e-io...

5.3CVSS5.8AI score0.61362EPSS
Exploits3References3
Nuclei
Nuclei
added 6 days ago63 views

WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection

WordPress Podlove Podcast Publisher plugin before 3.5.6 is susceptible to SQL injection. The Social & Donations module, not activated by default, adds the REST route /services/contributor/?P\d+ and takes id and category parameters as arguments. Both parameters can be exploited, thereby potentiall...

9.8CVSS7.3AI score0.86005EPSS
Exploits2References4
Patchstack
Patchstack
added 2026/05/20 12:36 p.m.4 views

WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin PowerPress Podcasting versions = 11.15.10...

5.9AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/04/10 7:23 p.m.0 views

CVE-2026-39505

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/08 9:31 a.m.0 views

EUVD-2026-20170

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.9AI score0.0004EPSS
Exploits0References2
NVD
NVD
added 2026/04/08 9:16 a.m.0 views

CVE-2026-39505

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.3CVSS0.0004EPSS
Exploits0References1
CVE
CVE
added 2026/04/08 8:30 a.m.2 views

CVE-2026-39505

CVE-2026-39505 concerns the WordPress plugin Seriously Simple Podcasting (versions up to and including 3.14.2). The issue is described as a Missing Authorization vulnerability caused by Exploiting Incorrectly Configured Access Control Security Levels, i.e., a broken access-control vulnerability t...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/08 8:30 a.m.17 views

CVE-2026-39505 WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.3CVSS0.0004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/08 8:30 a.m.0 views

CVE-2026-39505 WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/08 8:30 a.m.1 views

CVE-2026-39505

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.9AI score0.0004EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.1 views

PT-2026-31134

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through = 3.14.2...

5.3CVSS5.9AI score0.0004EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.2 views

WordPress plugin Seriously Simple Podcasting 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. There is a...

5.3CVSS5.8AI score0.0004EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.1 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS5.8AI score0.00042EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/03/26 2:13 a.m.1 views

WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by hivesec in WordPress Plugin Seriously Simple Podcasting versions = 3.14.2...

5.3CVSS5.9AI score0.0004EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2026/03/13 9:31 p.m.1 views

EUVD-2026-11837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.2 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:41 a.m.2 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.0 views

PT-2026-25198

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.3 views

WordPress plugin PowerPress Podcasting 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.9CVSS5.6AI score0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.2 views

CVE-2026-23798

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS5.8AI score0.00071EPSS
Exploits0References1
Rows per page
Query Builder