CVE-2026-16293

The PowerPress Podcasting plugin by Blubrry for WordPress (versions before 11.16.11 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain Podcast Episode settings , specifically the Podcast Episode Chapters URL . This allows u...