| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-10147 | Podlove Podcast Publisher <= 4.2.6 - Unauthenticated Arbitrary File Upload | eteubert | Podlove Podcast Publisher | Critical | 9.8 | 2025-09-23 08:26:15 | Deep Dive |
| CVE-2025-1383 | Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function | eteubert | Podlove Podcast Publisher | Medium | 4.3 | 2025-03-06 11:11:01 | Deep Dive |
| CVE-2025-0554 | Podlove Podcast Publisher <= 4.1.25 - Authenticated (Admin+) Stored Cross-Site Scripting via Feed Name | eteubert | Podlove Podcast Publisher | Medium | 4.4 | 2025-01-18 05:33:49 | Deep Dive |
| CVE-2024-1810 | Archivist – Custom Archive Templates <= 1.7.5 - Reflected Cross-Site Scripting | eteubert | Archivist – Custom Archive Templates | Medium | 6.1 | 2024-02-24 04:32:26 | Deep Dive |
| CVE-2024-1109 | Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Unauthenticated Data Export | eteubert | Podlove Podcast Publisher | Medium | 5.3 | 2024-02-07 11:02:39 | Deep Dive |
| CVE-2024-1110 | Podlove Podcast Publisher <= 4.0.11 - Missing Authorization to Settings Import | eteubert | Podlove Podcast Publisher | Medium | 5.3 | 2024-02-07 11:02:39 | Deep Dive |