Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS

The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins. PoC 1. Create...

CVE-2022-40132

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

CVE-2022-40132 WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

CVE-2022-40132 WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

CVE-2022-40132

The CVE-2022-40132 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Seriously Simple Podcasting plugin prior to version 2.16.0, where an attacker could change plugin settings due to missing CSRF protection. Affected software is the Seriously Simple Podcasting plu...

PT-2022-25234 · WordPress · Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Seriously Simple Podcasting plugin versions prior to 2.16.0 Description: A Cross-Site Request Forgery CSRF issue allows for changes to plugin settings. Recommendations: For versions prior to 2.16.0, update to version 2.16.0 or later to resolv...

WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin settings change discovered by Muhammad Daffa Patchstack Alliance in WordPress Seriously Simple Podcasting plugin versions = 2.16.0. Solution Update the WordPress Seriously Simple Podcasting plugin to the latest available version at...

WordPress plugin Seriously Simple Podcasting 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin versions = 1.0.1. Solution Update the WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin to the latest available version at...

WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin versions = 1.0.1. Solution Update the WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin to the latest available version at least 1.0.2...

WordPress PowerPress Podcasting plugin <= 8.6.1 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Cross-Site Scripting XSS vulnerabilities discovered by Lenon Leite in the WordPress PowerPress Podcasting plugin versions = 8.6.1. Solution Update the WordPress PowerPress Podcasting plugin to the latest available version at least 8.6.2...

艾及第资讯有限公司云端社群播客系统跨站脚本漏洞

Ltd. Cloud Community Podcasting System is an application system of China Ai & Di Information Co. It is an online course management system. A cross-site scripting vulnerability exists in AiDi Information Limited Cloud Community Podcasting System. The vulnerability stems from the program's search...

AVLEONOV Podcast

I finally launched my own podcast. These are the audio tracks from my videos with some minimal changes, but it may be more convenient for someone to follow me this way. You can try to find my podcast in your podcast player by searching for "avleonov" well, at least it works in Podcast Addict or a...

CVE-2015-9410

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter...

Design/Logic Flaw

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter...

CVE-2016-10942

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...

CVE-2016-10941

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF...

CVE-2016-10942

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...

CVE-2016-10941

The vulnerability CVE-2016-10941 affects the Podlove Podcast Publisher (podlove-podcasting-plugin-for-wordpress) for WordPress prior to version 2.3.16. The issue is an XSS vulnerability that is exploitable via CSRF, allowing an attacker to inject and execute client-side code in affected sites. Do...