WordPress Blubrry PowerPress plugin < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL vulnerability

Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin PowerPress Podcasting versions 11.17.1...

CVE-2026-16293

The PowerPress Podcasting plugin by Blubrry for WordPress (versions before 11.16.11 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain Podcast Episode settings , specifically the Podcast Episode Chapters URL . This allows u...