CVE-2026-13729 in Podcast Publisher Plugin정보

요약

\~에 의해 MITRE • 2026. 08. 01.

The Podlove Podcast Publisher WordPress plugin before 4.5.3 does not perform nonce validation on some of its administrative create and delete actions, allowing attackers to create rogue records or delete legitimate ones via a forged request (CSRF) when a logged-in administrator is tricked into visiting a crafted page.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

책임이 있는

WPScan

예약하다

2026. 06. 29.

공개

2026. 08. 01.

모더레이션

수락

항목

VDB-385189

CPE

준비됨

CWE

CWE-352 (확인됨)

CVSS

4.3 (VulDB)

EPSS

0.00000

KEV

아니요

활동

낮음

부문

Hostingprovider

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-13729
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-13729
CVE Details	https://www.cvedetails.com/cve/CVE-2026-13729/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!