https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T13:44:26.658444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24666 CVE-2021-24666 — Podlove Podcast Publisher < 3.5.6 - Unauthenticated SQL Injection 2026-10-07T13:44:26.659519+00:00

Affected: Unknown Podlove Podcast Publisher

The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social & Donations' module (not activated by default), which adds the rest route '/services/contributor/(?P<id>[\d]+), takes an 'id' and 'category' parameters as arguments. Both parameters can be used for the SQLi.