ID: CVE-2024-1109
Published: 2024-02-07T11:15Z
Description: description_data: The Podlove Podcast Publisher plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the init_download() and init() functions in all versions up to, and including, 4.0.11. This makes it possible for unauthenticated attackers to export the plugin's tracking data and podcast information.
CWE: problemtype_data: description: CWE-862