CVE-2026-13729

CVE-2026-13729 concerns the Podlove Podcast Publisher WordPress plugin, affected in versions before 4.5.3. The vulnerability arises because the plugin does not perform nonce validation on some administrative create and delete actions, enabling a forged request (CSRF). This can allow an attacker t...