eteubert vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20253
3. 20264

Newest CVEs

• CVE-2026-93775

  Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook

  eteubert · Podlove Podcast Publisher

  High7.2
• CVE-2026-75966

  Podlove Podcast Publisher <= 4.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'episode_contributor[..][..][comment]' Parameter

  eteubert · Podlove Podcast Publisher

  Medium6.4
• CVE-2026-16099

  Podlove Podcast Publisher <= 4.5.3 - Authenticated (Contributor+) PHP Object Injection to Arbitrary File Deletion via 'unfurl_data' Parameter

  eteubert · Podlove Podcast Publisher

  High8.8
• CVE-2026-13001

  Podlove Podcast Publisher <= 4.5.1 - Unauthenticated Arbitrary File Upload via podlove_image_cache_url Parameter

  eteubert · Podlove Podcast Publisher

  Critical9.8
• CVE-2025-10147

  Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload

  eteubert · Podlove Podcast Publisher

  Critical9.8
• CVE-2025-1383

  Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function

  eteubert · Podlove Podcast Publisher

  Medium4.3
• CVE-2025-0554

  Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name

  eteubert · Podlove Podcast Publisher

  Medium4.4
• CVE-2024-1810

  Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting

  eteubert · Archivist – Custom Archive Templates

  Medium6.1
• CVE-2024-1109

  Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export

  eteubert · Podlove Podcast Publisher

  Medium5.3
• CVE-2024-1110

  Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import

  eteubert · Podlove Podcast Publisher

  Medium5.3