CVE-2026-14860

CVE-2026-14860 affects the Podcast Player WordPress plugin up to version 8.3.0. The root cause is failure to validate the destination of a server-side request constructed from user input, enabling unauthenticated attackers to trigger requests to arbitrary hosts and read responses that parse as RS...