CVE-2023-1917

🗓️ 09 Jun 2023 05:33:15Reported by WordfenceType

PowerPress plugin for WordPress is vulnerable to Stored XSS via the plugin's shortcode(s) in versions up to 10.0

Reporter	Title	Published	Views	Family All 14
0day.today	WordPress PowerPress 10.0 Cross Site Scripting Vulnerability	24 Apr 202300:00	–	zdt
ATTACKERKB	CVE-2023-1917	9 Jun 202306:15	–	attackerkb
CNNVD	WordPress Plugin PowerPress 跨站脚本漏洞	9 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-1917 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	9 Jun 202305:33	–	cvelist
EUVD	EUVD-2023-24105	3 Oct 202520:07	–	euvd
NVD	CVE-2023-1917	9 Jun 202306:15	–	nvd
OSV	CVE-2023-1917	9 Jun 202306:15	–	osv
Patchstack	WordPress PowerPress Podcasting Plugin <= 10.0 is vulnerable to Cross Site Scripting (XSS)	12 Apr 202300:00	–	patchstack
Prion	Cross site scripting	9 Jun 202306:15	–	prion
RedhatCVE	CVE-2023-1917	23 May 202502:33	–	redhatcve

NVD

Vulners

Node

blubrry powerpressRange≤10.0wordpress

[
  {
    "vendor": "blubrry",
    "product": "PowerPress Podcasting plugin by Blubrry",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "10.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/2896729/powerpress
plugins	www.plugins.trac.wordpress.org/browser/powerpress/trunk/powerpress-player.php
wordfence	www.wordfence.com/blog/2023/04/blubrry-addresses-authenticated-stored-xss-vulnerability-in-powerpress-wordpress-plugin/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/44583cb7-bc32-4e62-8431-f5f1f6baeff2
plugins	www.plugins.trac.wordpress.org/changeset/2899207/powerpress

08 Apr 2026 18:17Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.15.4

EPSS0.00135

SSVC

CWE-79