Podlove Podcast Publisher <= 4.1.15 is vulnerable to Admin+ Remote Code Execution (RCE) vulnerability

Administrator

Published
2024-11-10

The Podlove Podcast Publisher plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.15. This makes it possible for authenticated attackers, with administrator-level access and above, to execute code on the server.

CVE

https://www.cve.org/CVERecord?id=CVE-2024-52393

CVSS

Score:9.1

Severity:Critical

Version: 4.1.15

There is a patch available in v4.1.17 and we strongly recommend you update to this version as soon as possible.