Blubrry PowerPress Podcasting plugin by Blubrry

• CVE-2026-12098 Medium 6.4 PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field 0.2%
• CVE-2026-2988 Medium 6.4 Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes 0.2%
• CVE-2025-13536 High 8.8 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' 0.6%
• CVE-2024-9543 Medium 6.4 Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode 0.3%
• CVE-2024-6588 Medium 6.4 PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter 0.4%
• CVE-2023-41239 Medium 6.4 WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) 0.5%
• CVE-2023-30778 Medium 5.5 WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) 0.3%
• CVE-2023-1917 Medium 5.4 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.5%