Skip to content
Threat Feed
Subscribe

Vendor

Podlove

1 brief RSS
critical advisory

Critical Vulnerability in Podlove Podcast Publisher Plugin Allows Unauthenticated File Uploads Leading to RCE

A critical vulnerability, CVE-2026-13001, in the Podlove Podcast Publisher plugin for WordPress, impacting versions up to and including 4.5.1, allows unauthenticated attackers to upload arbitrary files due to missing file type validation, potentially leading to remote code execution on the server.

Podlove Podcast Publisher <= 4.5.1 wordpress plugin vulnerability file-upload rce
1r 3t 1c