Skip to main content

Podlove Podcast Publisher CVE-2024-52393

CRITICAL
Improper Neutralization of Script in Attributes of IMG Tags in a Web Page (CWE-82)
2024-11-14 audit@patchstack.com
WordPress Deserialization Podlove Podcast Publisher Wordpress Plugin Podlove
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Severity Changed
Apr 23, 2026 - 15:22 NVD
HIGH CRITICAL
CVSS changed
Apr 23, 2026 - 15:22 NVD
7.2 (HIGH) 9.1 (CRITICAL)
CVE Published
Nov 14, 2024 - 18:15 nvd
HIGH 7.2
CVE Published
Nov 14, 2024 - 18:15 cve.org
CRITICAL 9.1

DescriptionCVE.org

Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.This issue affects Podlove Podcast Publisher: from n/a through <= 4.1.15.

AnalysisAI

Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.1.15. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-82. Deserialization of Untrusted Data vulnerability in Eric Teubert Podlove Podcast Publisher podlove-podcasting-plugin-for-wordpress.1.15. Affected products include: Podlove Podlove Podcast Publisher.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Podlove Podcast Publisher

View all
CVE-2026-13001 CRITICAL POC
9.8 Jul 14

Arbitrary file upload in the Podlove Podcast Publisher WordPress plugin (all versions through 4.5.1) allows remote attac
CVE-2021-24666 CRITICAL POC
9.8 Sep 27

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by def
CVE-2024-32139 HIGH
8.5 Apr 15

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Podlove Podlove Po
CVE-2017-12949 HIGH
8.8 Aug 18

lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPr
CVE-2026-16099 HIGH
8.8 Aug 16

Arbitrary file deletion leading to remote code execution in the Podlove Podcast Publisher WordPress plugin (all versions
CVE-2024-13730 MEDIUM POC
4.8 May 15

The Podlove Podcast Publisher WordPress plugin before 4.2.1 does not sanitise and escape some of its settings, which cou
CVE-2024-13729 MEDIUM POC
4.8 May 15

The Podlove Podcast Publisher WordPress plugin before 4.1.24 does not sanitise and escape some of its settings, which co
CVE-2024-43984 HIGH
8.8 Oct 31

Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher allows Code Injection.1.13. Rated h
CVE-2024-32143 HIGH
8.8 Jun 11

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.1.0. Rated high severity (CVSS 8.8), this vulne
CVE-2023-25472 HIGH
8.8 May 23

Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.3 versions. Rated hig
CVE-2026-13729 MEDIUM POC
4.3 Aug 01

CSRF in Podlove Podcast Publisher WordPress plugin (all versions before 4.5.3) allows unauthenticated remote attackers t
CVE-2024-32712 HIGH
7.5 May 14

Missing Authorization vulnerability in Podlove Podlove Podcast Publisher.0.14. Rated high severity (CVSS 7.5), this vuln

Same weakness CWE-82 – Improper Neutralization of Script in Attributes of IMG Tags in a Web Page

View all
CVE-2024-52427 CRITICAL
9.9
CVE-2024-49271 CRITICAL
9.1
CVE-2024-48042 CRITICAL
9.1
CVE-2024-52434 CRITICAL
9.1
CVE-2023-30963 MEDIUM
5.4

Same technique Deserialization

View all
CVE-2015-7450 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8
CVE-2021-42237 CRITICAL POC
9.8
CVE-2025-24016 CRITICAL POC
9.9
CVE-2020-0618 HIGH POC
8.8
CVE-2015-4852 CRITICAL POC
9.8
CVE-2025-49113 CRITICAL POC
9.9

Share

CVE-2024-52393 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy