Powerpress Podcasting Plugin By Blubrry (Unknown) - vulnerabilities (CVEs)

7 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-07. Vendor: Unknown.

CVEs of Powerpress Podcasting Plugin By Blubrry

• CVE-2026-97354 - CVSS 4.1 (medium), 2026-10-07: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied…
• CVE-2026-97319 - CVSS 6.8 (medium), 2026-09-27: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page,…
• CVE-2026-16294 - CVSS 7.1 (high), 2026-08-12: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a…
• CVE-2026-16293 - CVSS 6.8 (medium), 2026-08-04: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could…
• CVE-2024-9227 - CVSS 4.8 (medium), 2025-05-15: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which…
• CVE-2024-9230 - CVSS 5.9 (medium), 2025-04-14: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which…
• CVE-2023-4820 - CVSS 5.4 (medium), 2023-10-16: The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users…