417 matches found
PT-2019-7735
Name of the Vulnerable Software and Affected Versions podlove-podcasting-plugin-for-wordpress versions prior to 2.3.16 Description The issue concerns SQL injection via the insert id parameter, which is exploitable via CSRF. This allows for potential manipulation of database queries. Recommendatio...
CVE-2016-10941: Improper Neutralization of Input During Web Page Generation
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has XSS exploitable via CSRF...
WordPress Podlove Podcast Publisher SQL Injection Vulnerability
WordPress Podlove Podcast Publisher is a workflow-oriented solution for podcasters who want to save time and gain complete control over the integrity of their Podcast publishing process, published content, and published content. A SQL injection vulnerability exists in the orderby parameter in...
CVE-2017-12949
lib\modules\contributors\contributorlisttable.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF...
Design/Logic Flaw
lib\modules\contributors\contributorlisttable.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF...
CVE-2017-12949
lib\modules\contributors\contributorlisttable.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF...
CVE-2017-12949
Podlove Podcast Publisher plugin for WordPress contains a SQL injection in lib/modules/contributors/contributor_list_table.php affecting version 2.5.3 and earlier, via the orderby parameter in wp-admin/admin.php and exploitable through CSRF. The issue is associated with CVE-2017-12949 and has bee...
CVE-2017-12949: Improper Neutralization of Special Elements used in an SQL Command
lib\modules\contributors\contributorlisttable.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF...
PT-2017-12792
Name of the Vulnerable Software and Affected Versions Podlove Podcast Publisher plugin versions 2.5.3 and earlier Description The issue concerns SQL injection in the orderby parameter to 'wp-admin/admin.php', which is exploitable through CSRF. Recommendations For Podlove Podcast Publisher plugin...
WordPress Podlove Podcast Publisher 2.5.3 SQL Injection Vulnerability
Exploit for php platform in category web applications Advisory Title: WordPress Podlove Podcast Publisher Plugin Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Podlove Podcast Publisher plugin Language: PHP Version: 2.5.3 and below Vendor Status...
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
During the security analysis, ThunderScan discovered SQL injection vulnerability in Podlove Podcast Publisher WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plugi...
WordPress Podlove Podcast Publisher plugin <=2.5.3 - SQL injection (SQLi) vulnerability
SQL injection SQLi vulnerability found by Neven Biruski in WordPress Podlove Podcast Publisher plugin version 2.5.3 and earlier version. This vulnerability allows registered users to get access to the database even if they don't have full administrator rights. Moreover, Cross Site request forgery...
WordPress Podlove Podcast Publisher 2.5.3 SQL Injection
DefenseCode ThunderScan SAST Advisory WordPress Podlove Podcast Publisher Plugin Security Vulnerability Advisory ID: DC-2017-05-006 Advisory Title: WordPress Podlove Podcast Publisher Plugin Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software: WordPress Podlove...
WordPress Plugin Podlove Podcast Publisher Cross Site Scripting and SQL Injection Vulnerabilities
The second plugin that will be dissected is called Podlove Publisher, a Wordpress plugin to manage podcasts. It suffered from multiple SQL injections and cross-site scripting vulnerabilities funnily enough also in a parameter named tab that are fixed by now. The SQL injections were all caused by...
WordPress Podlove Podcast Publisher Plugin <= 2.3.15 - Multiple Vulnerabilities
This plugin is prone to an SQL injection and cross site scripting vulnerabilities. Solution Update the plugin...
