Browse CVEs

MEDIUM 5.9 CVE-2024-9230 The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, … Powerpress 11.9.18+ Fix from $1,6002025-04-14 MEDIUM 6.5 CVE-2023-41239 Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin b… Powerpress after 11.0.6 Fix from $1,6002023-11-13 MEDIUM 5.4 CVE-2023-4820 The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could al… Powerpress 11.0.12+ Fix from $1,6002023-10-16 MEDIUM 5.4 CVE-2023-30778 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry plugin <= 10.0.1 versions. Powerpress after 10.0.1 Fix from $1,6002023-08-15 MEDIUM 5.4 CVE-2023-1917 The PowerPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 10.0… Powerpress after 10.0 Fix from $1,6002023-06-09 HIGH 7.2 CVE-2021-24123 Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones fr… Powerpress 8.3.8+ Fix from $1,9502021-03-18 MEDIUM 6.1 CVE-2020-25033 The Blubrry subscribe-sidebar (aka Subscribe Sidebar) plugin 1.3.1 for WordPress allows subscribe_sidebar.php&status= reflected XSS. Subscribe Sidebar Mitigation only Fix from $1,6002020-08-31 MEDIUM 5.4 CVE-2015-9410 The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter. Powerpress No fix yet Fix from $1,6002019-09-26