Podcast Importer SecondLine
Podcast Importer SecondLine has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2022; all 2 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Server-Side Request Forgery (SSRF), behind 1 of the records (50%). Other recurring categories include SQL Injection.
Every one of the 2 issues recorded for Podcast Importer SecondLine has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Podcast Importer SecondLine is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2022-1023Podcast Importer SecondLine < 1.3.8 - SQL Injection
Read the full analysisVulnerability Records

Podcast Importer SecondLine
Author
SecondLineThemes
Sync Podcast RSS feeds with your WordPress website automatically. The Podcast Importer plugin helps to easily import podcasts into WordPress. You can import your podcast into the regular WordPress posts or into a custom post type (if you have an existing one). The plugin fully supports popular WordPress podcasting plugins such as PowerPress, Seriously Simple Podcasting, Simple Podcast Press, and works even better with podcast themes developed by SecondLineThemes The plugin supports importing episodes into existing custom post types, assign categories, import featured images and more. Additionally, the plugin enables continuous import or “Sync” of podcast RSS feeds, so every time you release a new podcast episode, it could be automatically created within WordPress. You can also set multiple import schedules and import different podcasts from separate sources at the same time. (For example, when importing separate podcasts from separate feeds into one website) To use the plugin, simply run a new import under “Tools -> Podcast Importer SecondLine” via the main menu that appears in your WordPress dashboard. Set the different options and if you need a continuous import process for future episodes, make sure to hit that checkbox before running the import process. You can disable a schedueld import at any time by simply deleting the import entry. The plugin also supports automatic import of native / embed audio players from 15+ podcast hosting providers, including: Buzzsprout, Megaphone, Pinecast, Captivate, Transistor, Spotify for Creators, Simplecast, Podbean, Whooshkaa, Omny, Ausha, Spreaker, Beamly, Audioboom, Fireside, Libsyn and more. Pro Version The Pro version can be found here – https://secondlinethemes.com/podcast-importer-pro It includes: * Unlimited scheduled imports for podcasts/shows. * Import to any Custom Post Type or Custom Taxonomy. * Set specific import intervals / times. * Import transcripts from RSS feed. * Import audio player to custom fields. * Import tags and categories from the feeds. * Force a re-sync on all existing episodes (to update metadata) * Set a global featured image to all imported episodes. * Manual “Sync” button to sync on demand. About SecondLineThemes SecondLineThemes is developing unique WordPress themes and plugins for Podcasters. Our tools are very popular among podcasters. To hear more about us please check our website: https://secondlinethemes.com
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C