Lucene search
K

215 matches found

Patchstack
Patchstack
added 2026/05/20 12:36 p.m.2 views

WordPress PowerPress Podcasting plugin <= 11.15.10 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Phat RiO in WordPress Plugin PowerPress Podcasting versions = 11.15.10...

5.9AI score
Exploits0Affected Software1
EUVD
EUVD
added 2026/04/08 6:31 a.m.0 views

EUVD-2026-20035

The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6.1AI score0.00012EPSS
Exploits0References3
NVD
NVD
added 2026/04/08 4:17 a.m.0 views

CVE-2026-2988

The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00012EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 2:25 a.m.0 views

CVE-2026-2988 Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes

The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6.1AI score0.00012EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/08 2:25 a.m.15 views

CVE-2026-2988 Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes

The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS0.00012EPSS
Exploits0References2
CVE
CVE
added 2026/04/08 2:25 a.m.1 views

CVE-2026-2988

CVE-2026-2988 affects the Blubrry PowerPress WordPress plugin. Versions up to and including 11.15.15 are vulnerable to Stored Cross-Site Scripting via the powerpress and podcast shortcodes due to insufficient input sanitization and output escaping. Exploitation is possible by authenticated attack...

6.4CVSS6.1AI score0.00012EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.2 views

PT-2026-31072

The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

6.4CVSS6.1AI score0.00012EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/08 12:0 a.m.2 views

WordPress plugin Blubrry PowerPress 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00012EPSS
Exploits0References2
Patchstack
Patchstack
added 2026/04/07 10:53 p.m.1 views

WordPress Blubrry PowerPress plugin <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via powerpress and podcast Shortcodes vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin PowerPress Podcasting versions = 11.15.15...

6.4CVSS5.9AI score0.00012EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/03/26 3:17 p.m.1 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS5.8AI score0.00042EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.1 views

EUVD-2026-11837

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.2 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS0.00042EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 11:41 a.m.3 views

CVE-2026-32351

CVE-2026-32351 affects the WordPress PowerPress Podcasting plugin (PowerPress)

5.9CVSS5.8AI score0.00042EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:41 a.m.2 views

CVE-2026-32351

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/13 11:41 a.m.1 views

CVE-2026-32351 WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS5.8AI score0.00042EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/13 11:41 a.m.21 views

CVE-2026-32351 WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.9CVSS0.00042EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.0 views

PT-2026-25198

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through = 11.15.13...

5.8AI score0.00042EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.3 views

WordPress plugin PowerPress Podcasting 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

5.9CVSS5.6AI score0.00042EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.2 views

CVE-2026-23798

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS5.8AI score0.00071EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.3 views

EUVD-2026-9595

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

5.9AI score0.00071EPSS
Exploits0References2
Rows per page
Query Builder