CVE-2026-97354

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

CVE-2026-97354 PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

EUVD-2026-94192

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

CVE-2026-97354 PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

CVE-2026-97354

The PowerPress Podcasting plugin by Blubrry for WordPress (versions 11.13.12 - 11.17.10 ) is vulnerable to Server-Side Request Forgery (SSRF) . The root cause is a failure to validate the destination of redirects when the plugin fetches a user-supplied media URL. This allows users with contributo...

WordPress PowerPress Podcasting plugin by Blubrry plugin 11.13.12-11.17.10 - Contributor+ SSRF vulnerability

Contributor+ SSRF vulnerability discovered by Raj Ukani in WordPress Plugin PowerPress Podcasting versions 11.13.12-11.17.10...

PT-2026-107415

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services...

CVE-2026-104387

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

CVE-2026-104387 WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

CVE-2026-104387

The PowerPress Podcasting WordPress plugin versions

CVE-2026-104387 WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

EUVD-2026-93073

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

PT-2026-106372

Unauthenticated Broken Access Control in PowerPress Podcasting = 11.17.9 versions...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by b1ue0cean in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

CVE-2026-104407

Cross-Site Request Forgery CSRF vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9...

CVE-2026-104388 WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9...

CVE-2026-104388

The PowerPress Podcasting plugin for WordPress (versions

CVE-2026-104388 WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9...

WordPress PowerPress Podcasting plugin <= 11.17.9 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Peter Tang in WordPress Plugin PowerPress Podcasting versions = 11.17.9...

CVE-2026-104407

The PowerPress Podcasting plugin for WordPress (versions up to and including 11.17.9 ) is vulnerable to a Cross-Site Request Forgery (CSRF) (CWE-352). This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user. The issue has a HIGH base severity (CVSS...