Log in Start free

Blubrry

Products

ProductCVEsExploitedLatest
PowerPress Podcasting8–Oct 6, 2026
PowerPress Podcasting plugin by Blubrry8–Jun 18, 2026

Exploited and recent CVEs

  • CVE-2026-104387 High 7.2 WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability 0.3%
  • CVE-2026-12098 Medium 6.4 PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field 0.2%
  • CVE-2026-2988 Medium 6.4 Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes 0.2%
  • CVE-2026-32351 Medium 5.9 WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-23798 High 8.8 WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-13536 High 8.8 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' 0.6%
  • CVE-2025-64201 Medium 4.3 WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-49984 Medium 4.9 WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability 0.2%
  • CVE-2025-46264 Critical 9.9 WordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload Vulnerability 0.4%
  • CVE-2025-32690 Medium 6.5 WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-32691 Medium 4.9 WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability 0.3%
  • CVE-2024-9543 Medium 6.4 Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode 0.3%
  • CVE-2024-6588 Medium 6.4 PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter 0.4%
  • CVE-2023-41239 Medium 6.4 WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) 0.5%
  • CVE-2023-30778 Medium 5.5 WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-1917 Medium 5.4 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%