BL
Vendor
blubrry
26
CVEs
0
On KEV
1
New 30D
Products
PP9.9
PowerPress Podcasting
blubrry
8 CVEs0 on KEV1 new
PO7.2
Powerpress
Blubrry
9 CVEs0 on KEV0 new
PP8.8
PowerPress Podcasting plugin by Blubrry
blubrry
8 CVEs0 on KEV0 new
SS6.1
Subscribe Sidebar
Blubrry
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104387 | PP PowerPress Podcasting blubrry | 7.2 | Oct 6 | WordPress PowerPress Podcasting plugin <= 11.17.9 - Broken Access Control vulnerability |
| CVE-2026-12098 | PP PowerPress Podcasting plugin by Blubrry blubrry | 6.4 | Jun 18 | PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field |
| CVE-2026-2988 | PP PowerPress Podcasting plugin by Blubrry blubrry | 6.4 | Apr 8 | Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes |
| CVE-2026-32351 | PP PowerPress Podcasting blubrry | 5.9 | Mar 13 | WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-23798 | PP PowerPress Podcasting blubrry | 8.8 | Mar 5 | WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability |
| CVE-2025-13536 | PP PowerPress Podcasting plugin by Blubrry blubrry | 8.8 | Nov 27 | Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' |
| CVE-2025-64201 | PP PowerPress Podcasting blubrry | 4.3 | Oct 29 | WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2025-49984 | PP PowerPress Podcasting blubrry | 4.9 | Jun 20 | WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability |
| CVE-2024-9227 | PO Powerpress Blubrry | 4.8 | May 15 | PowerPress Podcasting < 11.9.18 - Author+ XSS |
| CVE-2025-46264 | PP PowerPress Podcasting blubrry | 9.9 | Apr 24 | WordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload Vulnerability |
| CVE-2024-9230 | PO Powerpress Blubrry | 5.9 | Apr 14 | PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL |
| CVE-2025-32690 | PP PowerPress Podcasting blubrry | 6.5 | Apr 9 | WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-32691 | PP PowerPress Podcasting blubrry | 4.9 | Apr 9 | WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability |
| CVE-2024-9543 | PP PowerPress Podcasting plugin by Blubrry blubrry | 6.4 | Oct 11 | Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode |
| CVE-2024-6588 | PP PowerPress Podcasting plugin by Blubrry blubrry | 6.4 | Jul 12 | PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter |
| CVE-2023-41239 | PP PowerPress Podcasting plugin by Blubrry Blubrry | 6.5 | Nov 13 | WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) |
| CVE-2023-4820 | PO Powerpress Blubrry | 5.4 | Oct 16 | PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS |
| CVE-2023-30778 | PP PowerPress Podcasting plugin by Blubrry Blubrry | 5.4 | Aug 15 | WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-1917 | PP PowerPress Podcasting plugin by Blubrry blubrry | 5.4 | Jun 9 | PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2021-24123 | PO Powerpress Blubrry | 7.2 | Mar 18 | PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE |
| CVE-2020-25033 | SS Subscribe Sidebar Blubrry | 6.1 | Aug 31 | The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS |
| CVE-2015-9410 | PO Powerpress Blubrry | 5.4 | Sep 25 | The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter |
| CVE-2015-1385 | PO Powerpress Blubrry | – | Feb 2 | Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via… |