CVE-2026-97319: Unknown Powerpress Podcasting Plugin By Blubrry

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products

• Unknown Powerpress Podcasting Plugin By Blubrry: before 11.17.2 (fixed in 11.17.2)

Published 2026-09-27. Last modified 2026-09-28.