CVE-2022-40132 WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

CVE-2022-40132 WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Seriously Simple Podcasting plugin = 2.16.0 at WordPress, leading to plugin settings change...

PT-2022-25234 · WordPress · Seriously Simple Podcasting

Name of the Vulnerable Software and Affected Versions: Seriously Simple Podcasting plugin versions prior to 2.16.0 Description: A Cross-Site Request Forgery CSRF issue allows for changes to plugin settings. Recommendations: For versions prior to 2.16.0, update to version 2.16.0 or later to resolv...

WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin settings change discovered by Muhammad Daffa Patchstack Alliance in WordPress Seriously Simple Podcasting plugin versions = 2.16.0. Solution Update the WordPress Seriously Simple Podcasting plugin to the latest available version at...

WordPress plugin Seriously Simple Podcasting 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin <= 1.0.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin versions = 1.0.1. Solution Update the WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin to the latest available version at...

WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin versions = 1.0.1. Solution Update the WordPress Podcast Box – Best Podcasting Plugin for WordPress plugin to the latest available version at least 1.0.2...

WordPress PowerPress Podcasting plugin <= 8.6.1 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Cross-Site Scripting XSS vulnerabilities discovered by Lenon Leite in the WordPress PowerPress Podcasting plugin versions = 8.6.1. Solution Update the WordPress PowerPress Podcasting plugin to the latest available version at least 8.6.2...

艾及第资讯有限公司云端社群播客系统跨站脚本漏洞

Ltd. Cloud Community Podcasting System is an application system of China Ai & Di Information Co. It is an online course management system. A cross-site scripting vulnerability exists in AiDi Information Limited Cloud Community Podcasting System. The vulnerability stems from the program's search...

AVLEONOV Podcast

I finally launched my own podcast. These are the audio tracks from my videos with some minimal changes, but it may be more convenient for someone to follow me this way. You can try to find my podcast in your podcast player by searching for "avleonov" well, at least it works in Podcast Addict or a...

CVE-2015-9410

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter...

Design/Logic Flaw

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter...

CVE-2016-10941

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF...

CVE-2016-10942

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...

CVE-2016-10942

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insertid parameter exploitable via CSRF...

CVE-2016-10941

The vulnerability CVE-2016-10941 affects the Podlove Podcast Publisher (podlove-podcasting-plugin-for-wordpress) for WordPress prior to version 2.3.16. The issue is an XSS vulnerability that is exploitable via CSRF, allowing an attacker to inject and execute client-side code in affected sites. Do...

CVE-2016-10941

The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF...

blogs.geelongcollege.vic.edu.au XSS vulnerability

Vulnerable URL: http://blogs.geelongcollege.vic.edu.au/71430/wp-content/plugins/podcasting/player/mediaplayer.swf?file=http://content.bitsontherun.com/videos/bkaovAYt-364766.flv=falseℑ=http://appsec.ws/ExploitDB/cMon.jpg=true=javascript:confirm/openbugbounty/;//=blank&.swf Details: Description|...

PowerPress Podcasting < 6.0.5 - Authenticated Cross-Site Scripting (XSS)

By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged in user’s session by stealing cookies. This means that the malicious hacker can change the logged in user’s password and invalidate the session of the victim while the hacker maintains access. 1. Logon into any...

PowerPress Podcasting < 6.0.5 - Authenticated Cross-Site Scripting (XSS)

By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged in user’s session by stealing cookies. This means that the malicious hacker can change the logged in user’s password and invalidate the session of the victim while the hacker maintains access. PoC 1. Logon into an...