EUVD-2025-6105

Malicious code in bioql PyPI...

CVE-2025-1383 Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajaxtranscriptdelete function. This makes it possible for unauthenticated attackers to delete...

PT-2025-9916

Name of the Vulnerable Software and Affected Versions Podlove Podcast Publisher plugin for WordPress versions up to and including 4.2.2 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the ajax transcript delete function. This allows...