CVE-2021-24743: Secondlinethemes Podcast Subscribe Buttons

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS.

Affected products

• Secondlinethemes Podcast Subscribe Buttons: before 1.4.2 (fixed in 1.4.2)

Published 2021-10-18. Last modified 2026-06-17.