Blubrry
Blubrry Powerpress: vulnerabilidades y CVE
Blubrry Powerpress tiene 23 vulnerabilidades publicadas, 10 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE23
Últimos 12 meses10
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-97319 | Media (6.8) | 0.24% | — | 27 sept 2026 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to… |
| CVE-2026-16294 | Alta (7.1) | 0.29% | — | 12 ago 2026 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as… |
| CVE-2026-16293 | Media (6.8) | 0.43% | — | 4 ago 2026 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored… |
| CVE-2026-12098 | Media (6.4) | 0.20% | — | 18 jun 2026 | The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'embed' Episode Meta Field in all versions up to, and including, 11.16.8 due to insufficient input… |
| CVE-2026-24637 | Alta (8.5) | 0.25% | — | 15 jun 2026 | Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions. |
| CVE-2026-2988 | Media (6.4) | 0.26% | — | 8 abr 2026 | The Blubrry PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'powerpress' and 'podcast' shortcodes in versions up to, and including, 11.15.15 due to insufficient input sanitization… |
| CVE-2026-32351 | Media (5.9) | 0.24% | — | 13 mar 2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through… |
| CVE-2026-23798 | Alta (8.8) | 0.50% | — | 5 mar 2026 | Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through <= 11.15.10. |
| CVE-2025-13536 | Alta (8.8) | 0.60% | — | 27 nov 2025 | The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file… |
| CVE-2025-64201 | Media (4.3) | 0.13% | — | 29 oct 2025 | Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.12. |
| CVE-2024-9227 | Media (4.8) | 0.31% | — | 15 may 2025 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow admin users to perform Stored Cross-Site Scripting… |
| CVE-2025-46264 | Crítica (9.9) | 0.43% | — | 24 abr 2025 | Unrestricted Upload of File with Dangerous Type vulnerability in blubrry PowerPress Podcasting powerpress allows Upload a Web Shell to a Web Server.This issue affects PowerPress Podcasting: from n/a through <= 11.12.5. |
| CVE-2024-9230 | Media (5.9) | 0.26% | — | 14 abr 2025 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site… |
| CVE-2025-32691 | Media (4.9) | 0.26% | — | 9 abr 2025 | Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.12.6. |
| CVE-2024-9543 | Media (6.4) | 0.34% | — | 11 oct 2024 | The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'skipto' shortcode in all versions up to, and including, 11.9.18 due to insufficient input… |
| CVE-2024-6588 | Media (6.4) | 0.38% | — | 12 jul 2024 | The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘media_url’ parameter in all versions up to, and including, 11.9.10 due to insufficient input… |
| CVE-2023-41239 | Media (6.5) | 0.46% | — | 13 nov 2023 | Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin by Blubrry: from n/a through 11.0.6. |
| CVE-2023-4820 | Media (5.4) | 0.40% | — | 16 oct 2023 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary… |
| CVE-2023-30778 | Media (5.4) | 0.34% | — | 15 ago 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions. |
| CVE-2023-1917 | Media (5.4) | 0.53% | — | 9 jun 2023 | The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 10.0 due to insufficient input sanitization and output escaping on user… |
| CVE-2021-24123 | Alta (7.2) | 1.6% | — | 18 mar 2021 | Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+)… |
| CVE-2015-9410 | Media (5.4) | 1.2% | — | 26 sept 2019 | The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter. |
| CVE-2015-1385 | Media (4.3) | 2.2% | — | 2 feb 2015 | Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.