Podcast Player
Monthly
Server-side request forgery in the Podcast Player WordPress plugin (all versions before 8.3.1) allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary hosts - including internal cloud metadata services, internal APIs, and private network endpoints - and read back any response that parses as RSS/XML. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-friction exploitation requiring no credentials and no user interaction against any WordPress site running an affected plugin version. Publicly available exploit code exists per WPScan; the vulnerability is not listed in CISA KEV, and EPSS sits at 0.15% (4th percentile), indicating limited observed exploitation to date despite the public POC.
Server-side request forgery in the Podcast Player WordPress plugin (all versions before 8.3.1) allows unauthenticated remote attackers to force the server to issue HTTP requests to arbitrary hosts - including internal cloud metadata services, internal APIs, and private network endpoints - and read back any response that parses as RSS/XML. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-friction exploitation requiring no credentials and no user interaction against any WordPress site running an affected plugin version. Publicly available exploit code exists per WPScan; the vulnerability is not listed in CISA KEV, and EPSS sits at 0.15% (4th percentile), indicating limited observed exploitation to date despite the public POC.