Lucene search
+L

238 matches found

RedhatCVE
RedhatCVE
added 2026/03/06 7:55 a.m.10 views

CVE-2026-23798

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS5.8AI score0.00482EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/03/05 6:30 a.m.11 views

EUVD-2026-9595

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

5.9AI score0.00482EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/05 6:16 a.m.9 views

CVE-2026-23798

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS0.00482EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/03/05 5:53 a.m.5 views

CVE-2026-23798 WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS5.8AI score0.00482EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/05 5:53 a.m.3 views

CVE-2026-23798

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

5.9AI score0.00482EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/05 5:53 a.m.19 views

CVE-2026-23798

CVE-2026-23798 affects the WordPress PowerPress Podcasting plugin by Blubrry. The issue is a PHP object injection via deserialization of untrusted data in PowerPress, with affected versions listed as up through

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/03/05 5:53 a.m.36 views

CVE-2026-23798 WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through = 11.15.10...

8.8CVSS0.00482EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/05 12:00 a.m.14 views

WordPress plugin PowerPress Podcasting 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/03/05 12:00 a.m.8 views

PT-2026-23216

Name of the Vulnerable Software and Affected Versions blubrry PowerPress Podcasting versions through 11.15.10 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This issue impacts PowerPress Podcasting. Recommendations Update...

5.8AI score0.00482EPSS
SaveExploits0References4
Patchstack
Patchstack
added 2026/02/25 7:46 a.m.14 views

WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin PowerPress Podcasting versions = 11.15.10...

8.8CVSS6AI score0.00482EPSS
SaveExploits0Affected Software1
Packet Storm News
Packet Storm News
added 2026/02/02 12:00 a.m.14 views

WordPress Blubrry PowerPress 6.0 Cross Site Scripting

A cross site scripting vulnerability exists in Blubrry PowerPress WordPress Plugin version 6.0. The vulnerability allows remote attackers to inject arbitrary web script or HTML. This issue is older research added to the archive...

4.3CVSS5.2AI score0.02237EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2026/01/09 12:32 p.m.19 views

CVE-2023-4820

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin...

5.4CVSS6.5AI score0.00403EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/11/28 9:10 a.m.14 views

CVE-2025-13536

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS7.4AI score0.00595EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/11/27 11:26 a.m.13 views

WordPress Blubrry PowerPress plugin <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' vulnerability

Authenticated Contributor+ Arbitrary File Upload via 'powerpresseditpost' vulnerability discovered by ISMAILSHADOW in WordPress Plugin PowerPress Podcasting versions = 11.15.2...

8.8CVSS7AI score0.00595EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/11/27 9:30 a.m.12 views

EUVD-2025-199808

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS6.9AI score0.00595EPSS
SaveExploits0References6
NVD
NVD
added 2025/11/27 9:15 a.m.13 views

CVE-2025-13536

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS0.00595EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/11/27 8:27 a.m.4 views

CVE-2025-13536 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS7AI score0.00595EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/11/27 8:27 a.m.20 views

CVE-2025-13536 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'

The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the...

8.8CVSS0.00595EPSS
SaveExploits0References5
CVE
CVE
added 2025/11/27 8:27 a.m.34 views

CVE-2025-13536

The CVE targets the Blubrry PowerPress plugin for WordPress (versions up to and including 11.15.2). The root cause is insufficient file type validation: the plugin validates file extensions but does not halt execution when validation fails inside the powerpress_edit_post function, allowing authen...

8.8CVSS7AI score0.00595EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/11/27 12:00 a.m.12 views

WordPress plugin Blubrry PowerPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.8AI score0.00595EPSS
SaveExploits0References6
Rows per page
Query Builder