Lucene search

K
wpvulndbWpvulndbWPVDB-ID:D718B574-9CEF-463E-9B23-A95EB0AF3A67
HistoryFeb 06, 2024 - 12:00 a.m.

Podlove Podcast Publisher < 4.0.12 - Missing Authorization to Unauthenticated Data Export

2024-02-0600:00:00
wpscan.com
5
wordpress
vulnerability
unauthorized access
data export
plugin

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

Description The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the init_download() and init() functions in all versions up to, and including, 4.0.11. This makes it possible for unauthenticated attackers to export the plugin’s tracking data and podcast information.

CPENameOperatorVersion
eq4.0.12

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.6%

Related for WPVDB-ID:D718B574-9CEF-463E-9B23-A95EB0AF3A67