Skip to content

Blubrry vulnerabilities

Products

Newest

blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.18.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-121762 8.8 HighNovember 7, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerability CVE-2026-121766 5.4 MediumNovember 7, 2026
blubrry powerpress podcasting plugin by blubrry PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects CVE-2026-97354 4.1 MediumOctober 7, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability CVE-2026-104387 7.2 HighOctober 6, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability CVE-2026-104388 5.3 MediumOctober 5, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-104407 7.1 HighOctober 5, 2026
blubrry powerpress podcasting plugin by blubrry PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block CVE-2026-97319 6.8 MediumSeptember 27, 2026
blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL CVE-2026-16294 7.1 HighAugust 12, 2026
blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL CVE-2026-16293 6.8 MediumAugust 4, 2026
blubrry powerpress podcasting plugin by blubrry PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field CVE-2026-12098 6.4 MediumJune 18, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability CVE-2026-24637 8.5 HighJune 15, 2026
blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes CVE-2026-2988 6.4 MediumApril 8, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability CVE-2026-32351 5.9 MediumMarch 13, 2026
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability CVE-2026-23798 8.8 HighMarch 5, 2026
blubrry powerpress podcasting plugin by blubrry Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' CVE-2025-13536 8.8 HighNovember 27, 2025
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-64201 4.3 MediumOctober 29, 2025
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-49984 4.9 MediumJune 20, 2025
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.9.18 - Author+ XSS CVE-2024-9227 4.8 MediumMay 15, 2025
blubrry powerpress podcasting WordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload Vulnerability CVE-2025-46264 9.9 CriticalApril 24, 2025
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL CVE-2024-9230 5.9 MediumApril 14, 2025
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-32690 6.5 MediumApril 9, 2025
blubrry powerpress podcasting WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-32691 4.9 MediumApril 9, 2025
blubrry powerpress podcasting plugin by blubrry Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode CVE-2024-9543 6.4 MediumOctober 11, 2024
blubrry powerpress podcasting plugin by blubrry PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter CVE-2024-6588 6.4 MediumJuly 12, 2024
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) CVE-2023-41239 6.4 MediumNovember 13, 2023
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS CVE-2023-4820 5.4 MediumOctober 16, 2023
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-30778 5.5 MediumAugust 15, 2023
blubrry powerpress, powerpress podcasting plugin by blubrry +1 more PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-1917 5.4 MediumJune 9, 2023
blubrry powerpress PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE CVE-2021-24123 7.2 HighMarch 18, 2021
blubrry subscribe sidebar The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows... CVE-2020-25033 6.1 MediumAugust 31, 2020
blubrry powerpress The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter. CVE-2015-9410 5.4 MediumSeptember 25, 2019
blubrry powerpress Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1... CVE-2015-1385 4.3 MediumFebruary 2, 2015