Unknown Powerpress Podcasting Plugin By Blubrry vulnerabilities

4 CVEs affecting Unknown Powerpress Podcasting Plugin By Blubrry, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-97354, published 2026-10-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-16293, published 2026-08-04. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as…
CVE-2026-16294, published 2026-08-12. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users…
CVE-2026-97319, published 2026-09-27. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor…
CVE-2026-97354, published 2026-10-07. Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days. The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the…