Blubrry Powerpress
9 CVEs affecting Blubrry Powerpress. Latest disclosed: 2025-05-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24123 | High | 7.2 | 2021-03-18 | Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast… |
CVE-2023-41239 | Medium | 6.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin by Blubrry… |
CVE-2024-9230 | Medium | 5.9 | 2025-04-14 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which coul… |
CVE-2023-30778 | Medium | 5.5 | 2023-08-15 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions. |
CVE-2023-4820 | Medium | 5.4 | 2023-10-16 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users… |
CVE-2023-1917 | Medium | 5.4 | 2023-06-09 | The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 10.0 due to in… |
CVE-2015-9410 | Medium | 5.4 | 2019-09-26 | The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter. |
CVE-2024-9227 | Medium | 4.8 | 2025-05-15 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which coul… |
CVE-2015-1385 | | 2015-02-02 | Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web… |