Known vulnerabilities in the Podlove Subscribe Button plugin
4 security advisories have been published for the Podlove Subscribe Button plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Podlove Subscribe Button - Cross-Site Scripting (XSS) (CVE-2025-58227) MEDIUM
- Podlove Subscribe Button - SQL Injection (CVE-2024-1118) HIGH
- Podlove Subscribe Button - Cross-Site Request Forgery (CSRF) (CVE-2023-25481) MEDIUM
- Podlove Subscribe Button - Cross-Site Scripting (XSS) (CVE-2023-25479) MEDIUM