CVE-2025-58204: 
WordPress vulnerability analysis and mitigation

The CVE-2025-58204 is an Open Redirect vulnerability affecting Eric Teubert's Podlove Podcast Publisher WordPress plugin through version 4.2.5. The vulnerability was discovered and reported by Nguyen Xuan Chien on July 10, 2025, and was publicly disclosed on August 27, 2025 (Patchstack).

The vulnerability is classified as a URL Redirection to Untrusted Site ('Open Redirect') vulnerability (CWE-601). It has been assigned a CVSS v3.1 base score of 4.7 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N. The vulnerability is exploitable remotely and requires no privileges, though user interaction is necessary (NVD, Rapid7).

The vulnerability allows malicious actors to redirect users from legitimate sites to potentially malicious ones due to insufficient validation of redirect URLs. This could facilitate phishing attacks by tricking users who believe they are visiting a legitimate site (Patchstack).

The vulnerability has been fixed in version 4.2.6 of the Podlove Podcast Publisher plugin. Users are advised to update to version 4.2.6 or later to remove the vulnerability (Patchstack).