PowerPress Podcasting plugin by Blubrry vulnerabilities

Product

PowerPress Podcasting plugin by Blubrry

by blubrry · last CVE Jun 18, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 7Low 0

Severity

Exploitation

Watch

Add PowerPress Podcasting plugin by Blubrry to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-41239	6.5	0%	Nov 13	WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) Affected: through 11.0.6
CVE-2026-12098	6.4	0%	Jun 18	PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field Affected: through 11.16.8
CVE-2026-2988	6.4	0%	Apr 8	Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes Affected: through 11.15.15
CVE-2024-9543	6.4	0%	Oct 11	Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode Affected: through 11.9.18
CVE-2024-6588	6.4	0%	Jul 12	PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter Affected: through 11.9.10
CVE-2023-30778	5.4	0%	Aug 15	WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 10.0.1
CVE-2023-1917	5.4	1%	Jun 9	PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 10.0