PatchSiren

Blubrry Podcasting CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Blubrry Podcasting CVE published 2026-10-05

CVE-2026-104407

A Cross-Site Request Forgery (CSRF) vulnerability exists in PowerPress Podcasting plugin versions up to 11.17.9. This issue allows attackers to perform Cross-Site Request Forgery. The vulnerability has a CVSS score of 7.1 and is classified as HIGH severity. Defenders should assess exposure and prioritize verification and updates to prevent potential CSRF attacks. The CVE record and NVD entry provide detai [truncated]

MEDIUM Blubrry Podcasting CVE published 2026-10-05

CVE-2026-104388

A Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting allows Retrieve Embedded Sensitive Data. This issue affects PowerPress Podcasting: from n/a through 11.17.9. The vulnerability has a CVSS score of 5.3 and a MEDIUM severity rating. Defenders should assess exposure and prioritize updates to prevent potential sensitive data exposure. The CVE record and NVD entry provide limite [truncated]

HIGH Blubrry Podcasting CVE published 2026-06-15

CVE-2026-24637

A SQL injection vulnerability exists in PowerPress Podcasting plugin versions up to 11.15.10. This issue allows a contributor to inject malicious SQL code, potentially leading to data exposure or modification.