CVE-2025-1383

The Podlove Podcast Publisher plugin for WordPress was vulnerable to Cross-Site Request Forgery via the ajax_transcript_delete function in all versions up to 4.2.2. Unauthenticated attackers could delete arbitrary transcripts by tricking an administrator into performing an action. Public referenc...