Skip to contentBlubrry Powerpress vulnerabilities
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.18.2 - Broken Access Control vulnerabilityCVE-2026-1257824.3 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.18.0 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1217628.8 High
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerabilityCVE-2026-1217665.4 Medium
- blubrry powerpress podcasting plugin by blubrryPowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL RedirectsCVE-2026-973544.1 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerabilityCVE-2026-1043877.2 High
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerabilityCVE-2026-1043885.3 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.17.9 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1044077.1 High
- blubrry powerpress podcasting plugin by blubrryPowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player BlockCVE-2026-973196.8 Medium
- blubrry powerpress podcasting plugin by blubrryBlubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URLCVE-2026-162947.1 High
- blubrry powerpress podcasting plugin by blubrryBlubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URLCVE-2026-162936.8 Medium
- blubrry powerpress podcasting plugin by blubrryPowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta FieldCVE-2026-120986.4 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerabilityCVE-2026-246378.5 High
- blubrry powerpress podcasting plugin by blubrryBlubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast ShortcodesCVE-2026-29886.4 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-323515.9 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerabilityCVE-2026-237988.8 High
- blubrry powerpress podcasting plugin by blubrryBlubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'CVE-2025-135368.8 High
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-642014.3 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-499844.9 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 morePowerPress Podcasting < 11.9.18 - Author+ XSSCVE-2024-92274.8 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload VulnerabilityCVE-2025-462649.9 Critical
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 morePowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URLCVE-2024-92305.9 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-326906.5 Medium
- blubrry powerpress podcastingWordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-326914.9 Medium
- blubrry powerpress podcasting plugin by blubrryPowerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto ShortcodeCVE-2024-95436.4 Medium
- blubrry powerpress podcasting plugin by blubrryPowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url ParameterCVE-2024-65886.4 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 moreWordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-412396.4 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 morePowerPress Podcasting < 11.0.12 - Contributor+ Stored XSSCVE-2023-48205.4 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 moreWordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-307785.5 Medium
- blubrry powerpress, powerpress podcasting plugin by blubrry +1 morePowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-19175.4 Medium
- blubrry powerpressPowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCECVE-2021-241237.2 High
- blubrry powerpressThe Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.CVE-2015-94105.4 Medium
- blubrry powerpressCross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1...CVE-2015-13854.3 Medium