Security Advisory
CVE-2016-10942
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The podlove-podcasting-plugin-for-wordpress plugin before 2.3.16 for WordPress has SQL injection via the insert_id parameter exploitable via CSRF.