Advisories · Technology

PowerPress Podcasting plugin by Blubrry.

Every CVE that names PowerPress Podcasting plugin by Blubrry among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97354 CVE record

CVSS 4.1 Medium

PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects
- PowerPress Podcasting plugin by Blubrry
- Server-side request forgery (SSRF)
Not analysed yet 7 Oct 2026
CVE-2026-97319 CVE record

CVSS 6.8 Medium

PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 27 Sept 2026
CVE-2026-16294 CVE record

CVSS 7.1 High

Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL
- PowerPress Podcasting plugin by Blubrry
- Server-side request forgery (SSRF)
Not analysed yet 12 Aug 2026
CVE-2026-16293 CVE record

CVSS 6.8 Medium

Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 4 Aug 2026
CVE-2026-12098 CVE record

CVSS 6.4 Medium

PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 18 Jun 2026
CVE-2026-2988 CVE record

CVSS 6.4 Medium

Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 8 Apr 2026
CVE-2025-13536 CVE record

CVSS 8.8 High

Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
- PowerPress Podcasting plugin by Blubrry
- Unrestricted file upload
Not analysed yet 27 Nov 2025
CVE-2024-9227 CVE record

CVSS 4.8 Medium

PowerPress Podcasting < 11.9.18 - Author+ XSS
- PowerPress Podcasting plugin by Blubrry
Not analysed yet 15 May 2025
CVE-2024-9230 CVE record

CVSS 5.9 Medium

PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
- PowerPress Podcasting plugin by Blubrry
Not analysed yet 14 Apr 2025
CVE-2024-9543 CVE record

CVSS 6.4 Medium

Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 11 Oct 2024
CVE-2024-6588 CVE record

CVSS 6.4 Medium

PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 12 Jul 2024
CVE-2023-41239 CVE record

CVSS 6.4 Medium

WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)
- PowerPress Podcasting plugin by Blubrry
- Server-side request forgery (SSRF)
Not analysed yet 13 Nov 2023
CVE-2023-4820 CVE record

CVSS 5.4 Medium

PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
- PowerPress Podcasting plugin by Blubrry
Not analysed yet 16 Oct 2023
CVE-2023-30778 CVE record

CVSS 5.5 Medium

WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 15 Aug 2023
CVE-2023-1917 CVE record

CVSS 5.4 Medium

PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- PowerPress Podcasting plugin by Blubrry
- Cross-site scripting (XSS)
Not analysed yet 9 Jun 2023