CVE-2026-94682

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

EUVD-2026-85486

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

CVE-2026-94682 WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

CVE-2026-94682 WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in Podcast Importer SecondLine = 1.5.6 versions...

CVE-2026-94682

The Podcast Importer SecondLine plugin for WordPress, in versions

WordPress Podcast Importer SecondLine plugin <= 1.5.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Podcast Importer SecondLine versions = 1.5.6...

PT-2026-97471

Name of the Vulnerable Software and Affected Versions Podcast Importer SecondLine versions prior to 1.5.7 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. Recommendations Update to a version newer than...

CVE-2022-1023

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file...

CVE-2022-1023

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file...

CVE-2022-1023

The CVE-2022-1023 entry concerns the WordPress plugin Podcast Importer SecondLine (versions before 1.3.8). The issue is a failure to sanitize/escape imported data, which can enable SQL injection via a malicious podcast file. Multiple connected sources confirm the vulnerability and provide exploit...

CVE-2022-1023 Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file...

CVE-2022-1023: Improper Neutralization of Special Elements used in an SQL Command

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file...

PT-2022-13598

Name of the Vulnerable Software and Affected Versions Podcast Importer SecondLine WordPress plugin versions prior to 1.3.8 Description The issue is related to the improper sanitization and escaping of some imported data, which could allow SQL injection attacks to be performed by importing a...

WordPress Podcast Importer SecondLine plugin SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Podcast Importer SecondLine plugin versions...

Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

The plugin does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file Put the XML below on a web server replacing the PAYLOAD with the correct one, then import a podcast...

WordPress Podcast Importer SecondLine plugin <= 1.3.7 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability discovered by YICHENG LIU-ZTE CHENFENG lab in WordPress Podcast Importer SecondLine plugin versions = 1.3.7. Solution Update the WordPress Podcast Importer SecondLine plugin to the latest available version at least 1.3.8...

Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

The plugin does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file PoC Put the XML below on a web server replacing the PAYLOAD with the correct one, then import a podcast...

WordPress server-side request forgery vulnerability (CNVD-2021-59062)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A server-side request forgery vulnerability exists in the WordPress Podcast Importer SecondLine...

CVE-2020-24149

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...

CVE-2020-24149

Server-side request forgery SSRF in the Podcast Importer SecondLine podcast-importer-secondline plugin 1.1.4 for WordPress via the podcastfeed parameter in a secondlineimportinitialize action to the secondlinepodcastimport page...