WordPress Podlove Podcast Publisher plugin < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion vulnerability

Podcast Contributor/Group/Role Creation and Deletion vulnerability discovered by Ryan Fabella in WordPress Plugin Podlove Podcast Publisher versions 4.5.3...

CVE-2026-13729

The CVE concerns the Podlove Podcast Publisher WordPress plugin prior to version 4.5.3. The vulnerability is a CSRF (forged request) flaw caused by missing nonce validation on certain administrative create and delete actions, enabling an attacker to create rogue records or delete legitimate ones ...