Vulnerability index

Browse CVEs

8 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Powerpress MEDIUM 5.9

CVE-2024-9230

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, …

Fix: 11.9.18+

Fix from $1,600 2025-04-14

Powerpress MEDIUM 6.5

CVE-2023-41239

Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin b…

Fix: after 11.0.6

Fix from $1,600 2023-11-13

Powerpress MEDIUM 5.4

CVE-2023-4820

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could al…

Fix: 11.0.12+

Fix from $1,600 2023-10-16

Powerpress MEDIUM 5.4

CVE-2023-30778

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions.

Fix: after 10.0.1

Fix from $1,600 2023-08-15

Powerpress MEDIUM 5.4

CVE-2023-1917

The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 10.0…

Fix: after 10.0

Fix from $1,600 2023-06-09

Powerpress HIGH 7.2

CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones fr…

Fix: 8.3.8+

Fix from $1,950 2021-03-18

Subscribe Sidebar MEDIUM 6.1

CVE-2020-25033

The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS.

Mitigation only

Fix from $1,600 2020-08-31

Powerpress MEDIUM 5.4

CVE-2015-9410

The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter.

No fix yet

Fix from $1,600 2019-09-26