Input validation vulnerability in Podlove Podcast Publisher 4.1.13

The plugin called Podlove Podcast Publisher, used for WordPress websites, has a security issue called Cross-Site Request Forgery. This problem affects versions up to 4.1.13. The reason for this vulnerability is because the plugin does not properly check for a security code called “nonce” in the ‘get’, ‘update’, ‘create’, and ‘delete’ functions. This means that people who are not logged into the website can change the templates and even run code remotely if they can trick the website administrator into clicking on a link.