The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the init_download() and init() functions in all versions up to, and including, 4.0.11. This makes it possible for unauthenticated attackers to export the plugin's tracking data and podcast information.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2024-08-01T18:26:30.508Z
Reserved: 2024-01-31T12:50:01.629Z
Link: CVE-2024-1109

Updated: 2024-08-01T18:26:30.508Z

Status : Modified
Published: 2024-02-07T11:15:08.683
Modified: 2024-11-21T08:49:48.980
Link: CVE-2024-1109

No data.