WordPress plugin
PowerPress Podcasting plugin by Blubrry security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 35 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High4
- Medium30
- Low0
All PowerPress Podcasting plugin by Blubrry vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) PHP Object Injection ≤11.15.10Update to 11.15.11 | CVE-2026-23798 | |
| High8.8 | Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post' ≤11.15.2Update to 11.15.3 | CVE-2025-13536 | |
| High8.8 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤11.12.5Update to 11.12.6 | CVE-2025-46264 | |
| Critical10.0 | Injected Backdoor 4.4.6.4 – 4.4.7.1Update to 4.4.7.3 | CVE-2024-6297 | |
| High7.2 | Arbitrary File Upload ≤8.3.7Update to 8.3.8 | CVE-2021-24123 |
- High7.5Authenticated (Contributor+) PHP Object Injection
≤11.15.10Update to 11.15.11
- High8.8Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
≤11.15.2Update to 11.15.3
- High8.8Authenticated (Contributor+) Stored Cross-Site Scripting
≤11.12.5Update to 11.12.6
- Critical10.0Injected Backdoor
4.4.6.4 – 4.4.7.1Update to 4.4.7.3
- High7.2Arbitrary File Upload
≤8.3.7Update to 8.3.8
PowerPress Podcasting plugin by Blubrry: common questions
Does PowerPress Podcasting plugin by Blubrry have known vulnerabilities?
Yes. VulnCrest Radar lists 35 known vulnerabilities in PowerPress Podcasting plugin by Blubrry: 1 critical, 4 high, 30 medium. None are known to affect version null.
How do I check which version of PowerPress Podcasting plugin by Blubrry I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PowerPress Podcasting plugin by Blubrry vulnerability?
CVE-2026-118587, published Nov 12, 2026: PowerPress Podcasting plugin by Blubrry <= 11.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' and 'height' Shortcode Attributes. Severity: Medium (CVSS 5.4).
Is any PowerPress Podcasting plugin by Blubrry vulnerability listed in CISA KEV?
No. None of the known PowerPress Podcasting plugin by Blubrry vulnerabilities is currently listed in the CISA KEV catalog.