Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-09-27	CVE-2021-24666	Unspecified vulnerability in Podlove Podcast Publisher The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an 'id' and 'category' parameters as arguments. network low complexity podlove critical	9.8
2019-09-13	CVE-2016-10942	SQL Injection vulnerability in Podlove Podcast Publisher The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF. network low complexity podlove CWE-89 critical	9.8