Vulnerabilities / PowerPress
PowerPress vulnerabilities
Advisories WPSec published for PowerPress Podcasting plugin by Blubrry. Other sources may list more. Its attack surface: PowerPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0331 | PowerPress <= 11.17.9 - Unauthenticated Sensitive Information Exposure via Embed and Play in New Window Endpoints | Medium 5.3 | 11.17.11 |
| 2026-10-02 | WPSEC-2026-0330 | PowerPress <= 11.17.9 - Authenticated (Contributor+) Server-Side Request Forgery via Episode Media URL | Medium 6.4 | 11.17.11 |
| 2026-10-02 | WPSEC-2026-0329 | PowerPress <= 11.17.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Player Settings | Medium 6.1 | 11.17.11 |
License: CC BY 4.0