Approved changes feed: RSS · Atom

cpe:2.3:a:podlove:podlove_subscribe_button:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPodlove (4f5e4544-d089-5ed4-a9ae-18ef387c1791)
ProductPodlove Subscribe Button (32f7b0fd-0af5-54cd-aaa3-88fd07e34efa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/podlove/podlove-subscribe-button purl2cpe 2026-06-01 10:12:14.202366

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25481 vulnerable 2026-06-08 05:56:08.877332 WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions.
Published: 2023-05-23T12:26:25.243Z
Updated: 2026-04-28T16:08:09.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25479 vulnerable 2026-06-08 05:56:08.873418 WordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (5.9)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions.
Published: 2023-04-25T12:00:04.202Z
Updated: 2026-04-28T16:08:09.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.