VendorsBlubrrypowerpressany version
Vulnerabilities

Blubrry PowerPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2021-24123
PowerPress < 8.3.8 - Authenticated Arbitrary File Upload leading to RCE
Published 2021-03-18 · Modified
7.2EPSS 0.016
CVE-2023-41239
WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)
Published 2023-11-13 · Modified
6.5EPSS 0.005
CVE-2024-9230
PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
Published 2025-04-14 · Analyzed
5.9EPSS 0.003
CVE-2023-30778
WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-15 · Modified
5.5EPSS 0.003
CVE-2023-1917
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2023-06-09 · Modified
5.4EPSS 0.005
CVE-2023-4820
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Published 2023-10-16 · Modified
5.4EPSS 0.004
CVE-2024-9227
PowerPress Podcasting < 11.9.18 - Author+ XSS
Published 2025-05-15 · Analyzed
4.8EPSS 0.003
CVE-2015-1385
Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cat parameter in a powerpress-editcategoryfeed action in the powerpressadmin_categoryfeeds.php page to wp-admin/admin.php.
Published 2015-02-02 · Modified
4.3EPSS 0.022