podlove-podcasting-plugin-for-wordpress 漏洞

严重CVE-2026-13001文件上传2026/09/30

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

Podlove Podcast Publisher plugin for WordPress through 4.5.1 is vulnerable to arbitrary file uploads due to missing file type validation in the podlove_handle_cache_files function. The image cache derives the stored file extension from the path of the attacker supplied source URL, while the image validation is performed against a different file name taken from the full source URL, so a source URL whose path carries a dangerous extension is written to the cache with that extension.

PoC 已收录podlove-podcasting-plugin-for-wordpress

CVSS9.8EPSS 3.8%

严重CVE-2021-24666SQL注入2021/09/28

WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection

WordPress Podlove Podcast Publisher plugin before 3.5.6 is susceptible to SQL injection. The Social & Donations module, not activated by default, adds the REST route /services/contributor/(?P<id>[\d]+) and takes id and category parameters as arguments. Both parameters can be exploited, thereby potentially enabling an attacker to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.

PoC 已收录podlove-podcasting-plugin-for-wordpress

CVSS9.8EPSS 8.9%

podlove-podcasting-plugin-for-wordpress

关联漏洞

Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload

WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection