Medium
CVE-2026-104387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 31
Reset filters
Medium
CVE-2026-104388
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Unauthenticated Information Exposure
Medium
CVE-2026-104407
PowerPress Podcasting plugin by Blubrry <= 11.17.9 - Cross-Site Request Forgery
Medium
CVE-2026-97354
PowerPress 11.13.12 - 11.17.9 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-97319
PowerPress <= 11.17.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-16294
PowerPress Podcasting plugin by Blubrry < 11.17.1 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2026-16293
Blubrry PowerPress <= 11.16.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-12098
PowerPress Podcasting plugin by Blubrry <= 11.16.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field
Medium
CVE-2026-24637
PowerPress Podcasting plugin by Blubrry <= 11.15.10 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2026-2988
Blubrry PowerPress <= 11.15.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes
High
CVE-2026-23798
PowerPress Podcasting plugin by Blubrry <= 11.15.10 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2026-32351
PowerPress Podcasting <= 11.15.13 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-13536
Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
Medium
CVE-2025-64201
PowerPress Podcasting <= 11.13.12 - Cross-Site Request Forgery
Medium
CVE-2025-49984
PowerPress Podcasting <= 11.13.11 - Authenticated (Contributor+) Server-Side Request Forgery
High
CVE-2025-46264
PowerPress Podcasting plugin by Blubrry <= 11.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-32691
PowerPress Podcasting <= 11.12.6 - Authenticated (Contributor+) Server-Side Request Forgery
Medium
CVE-2025-32690
PowerPress Podcasting <= 11.12.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-31436
Blubrry PowerPress Podcasting plugin MultiSite add-on <= 0.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-9230
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-9227
PowerPress Podcasting <= 11.9.17 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-9543
Powerpress <= 11.9.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Medium
CVE-2024-6588
PowerPress Podcasting plugin by Blubrry <= 11.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
Medium
CVE-2023-4820
PowerPress <= 11.0.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Media URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.