Podlove Subscribe button
Podlove Subscribe button has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (40%). Other recurring categories include Cross-Site Scripting, SQL Injection.
Every one of the 5 issues recorded for Podlove Subscribe button has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (3) reported by yuyudhn. Podlove Subscribe button is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.1.12.
CVE-2024-1118Podlove Subscribe button <= 1.3.10 - Authenticated (Contributor+) SQL Injection
Read the full analysisVulnerability Records
Podlove Subscribe button
Author
Alexander Lueken
This plugin allows easy inclusion of the Podlove Subscribe Button. Put it in your sidebar with a simple widget or include the button in pages and/or posts with a simple shortcode. About the Podlove Subscribe Button The Podlove Subscribe Button allows for simple subscription of podcasts in anybody’s favorite podcast app right from the browser without having to deal with pesky feed URLs and go on a hunt for feed subscription dialogues. The button knows how to activate the subscription functionality in all popular podcast apps supporting various operating systems including but not limited to iOS, Android, WindowsPhone, OSX, Windows and Linux. The button is centrally hosted and gets permanently updated when new podcast apps emerge or when new features are added. Using the button ensures your podcast can easily be subscribed to and presents an ever more popular user interface that your audience gets more and more used to. About Podlove Podlove is an open source initiative to improve the overall podcasting infrastructure and to come up with simple but helpful standards and tools to make publishing and listening to podcast as easy as possible. Podlove currently provides: Podlove Podcast Publisher – a powerful plugin for WordPress for podcasters to publish metadata-rich podcasts Podlove Web Player – a podcast-optimized HTML5 web player with chapter support Podlove Subscribe Button – a centrally hosted universal podcast subscribe button for the web Other Resources Podlove Project: https://podlove.org/ Podlove Community: https://community.podlove.org/ Documentation: https://docs.podlove.org/ Donate: https://podlove.org/donations/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C