PO
Product
Powerpress
by Blubrry · last CVE May 15, 2025
9
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 0
Watch

Add Powerpress to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24123
7.2
2%
Mar 18
Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section),…
Affected: before 8.3.8
CVE-2023-41239
6.5
0%
Nov 13
WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF)
Affected: through 11.0.6
CVE-2024-9230
5.9
0%
Apr 14
PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
Affected: before 11.9.18
CVE-2023-4820
5.4
0%
Oct 16
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Affected: before 11.0.12
CVE-2023-30778
5.4
0%
Aug 15
WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS)
Affected: through 10.0.1
CVE-2023-1917
5.4
1%
Jun 9
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: through 10.0
CVE-2015-9410
5.4
1%
Sep 26
The Blubrry PowerPress Podcasting plugin 6.0.4 for WordPress has XSS via the tab parameter
Affected: 6.0.4
CVE-2024-9227
4.8
0%
May 15
PowerPress Podcasting < 11.9.18 - Author+ XSS
Affected: before 11.9.18
CVE-2015-1385
–
2%
Feb 2
Cross-site scripting (XSS) vulnerability in the Blubrry PowerPress Podcasting plugin before 6.0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via…
Affected: through 6.0
Showing 9