Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

blubrry — Vulnerabilities & Security Advisories 14

Browse all 14 CVE security advisories affecting blubrry. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPublished
CVE-2026-2988 Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes — PowerPress Podcasting plugin by BlubrryCWE-79 6.4 Medium2026-04-08
CVE-2026-32351 WordPress PowerPress Podcasting plugin <= 11.15.13 - Cross Site Scripting (XSS) vulnerability — PowerPress PodcastingCWE-79 5.4 -2026-03-13
CVE-2026-23798 WordPress PowerPress Podcasting plugin <= 11.15.10 - PHP Object Injection vulnerability — PowerPress PodcastingCWE-502 9.8 -2026-03-05
CVE-2025-13536 Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' — PowerPress Podcasting plugin by BlubrryCWE-434 8.8 High2025-11-27
CVE-2025-64201 WordPress PowerPress Podcasting plugin <= 11.13.12 - Cross Site Request Forgery (CSRF) vulnerability — PowerPress PodcastingCWE-352 4.3 Medium2025-10-29
CVE-2025-49984 WordPress PowerPress Podcasting plugin <= 11.13.11 - Server Side Request Forgery (SSRF) Vulnerability — PowerPress PodcastingCWE-918 4.9 Medium2025-06-20
CVE-2025-46264 WordPress PowerPress Podcasting <= 11.12.5 - Arbitrary File Upload Vulnerability — PowerPress PodcastingCWE-434 9.9 Critical2025-04-24
CVE-2025-32691 WordPress PowerPress Podcasting plugin <= 11.12.6 - Server Side Request Forgery (SSRF) Vulnerability — PowerPress PodcastingCWE-918 4.9 Medium2025-04-09
CVE-2025-32690 WordPress PowerPress Podcasting plugin <= 11.12.5 - Cross Site Scripting (XSS) Vulnerability — PowerPress PodcastingCWE-79 6.5 Medium2025-04-09
CVE-2024-9543 Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode — PowerPress Podcasting plugin by BlubrryCWE-79 6.4 Medium2024-10-11
CVE-2024-6588 PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter — PowerPress Podcasting plugin by BlubrryCWE-79 6.4 Medium2024-07-12
CVE-2023-41239 WordPress PowerPress Podcasting Plugin <= 11.0.6 is vulnerable to Server Side Request Forgery (SSRF) — PowerPress Podcasting plugin by BlubrryCWE-918 6.4 Medium2023-11-13
CVE-2023-30778 WordPress PowerPress Podcasting Plugin <= 10.0.1 is vulnerable to Cross Site Scripting (XSS) — PowerPress Podcasting plugin by BlubrryCWE-79 5.5 Medium2023-08-15
CVE-2023-1917 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — PowerPress Podcasting plugin by BlubrryCWE-79 5.4 Medium2023-06-09

This page lists every published CVE security advisory associated with blubrry. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.