CVE-2022-1023: Secondlinethemes Podcast Importer Secondline

High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days.

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

Affected products

• Secondlinethemes Podcast Importer Secondline: before 1.3.8 (fixed in 1.3.8)

Published 2022-04-11. Last modified 2026-06-17.