SQL Injection Vulnerability in Podlove Podcasting Plugin for WordPress
CVE-2016-10942

9.8CRITICAL

Key Information:

Vendor: Wordpress
Status: Podlove Podcast Publisher
Vendor: CVE Published:; 13 September 2019

What is CVE-2016-10942?

A vulnerability exists in the Podlove Podcasting Plugin for WordPress, affecting versions before 2.3.16, which allows for SQL injection through the 'insert_id' parameter. This vulnerability can be exploited via Cross-Site Request Forgery (CSRF), enabling attackers to manipulate database queries. It is crucial for users of the affected plugin to update to the latest version to mitigate the risk of unauthorized database access and potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch