| Package | Affected versions | Patched versions |
|---|---|---|
| podlove podcast publisher | = 2.5.3 |
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free