Blubrry Powerpress Podcasting vulnerabilities
7 known vulnerabilities affecting blubrry/powerpress_podcasting.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2025-46264P2CRITICALCVSS 9.9≤ 11.12.52025-04-24
CVE-2025-46264 [CRITICAL] CWE-434 CVE-2025-46264: Unrestricted Upload of File with Dangerous Type vulnerability in blubrry PowerPress Podcasting power
Unrestricted Upload of File with Dangerous Type vulnerability in blubrry PowerPress Podcasting powerpress allows Upload a Web Shell to a Web Server.This issue affects PowerPress Podcasting: from n/a through <= 11.12.5.
nvd
CVE-2026-23798P3HIGHCVSS 8.8≤ 11.15.102026-03-05
CVE-2026-23798 [HIGH] CWE-502 CVE-2026-23798: Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows O
Deserialization of Untrusted Data vulnerability in blubrry PowerPress Podcasting powerpress allows Object Injection.This issue affects PowerPress Podcasting: from n/a through <= 11.15.10.
nvd
CVE-2025-32690P4MEDIUMCVSS 6.5≤ 11.12.52025-04-09
CVE-2025-32690 [MEDIUM] CWE-79 CVE-2025-32690: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows DOM-Based XSS.This issue affects PowerPress Podcasting: from n/a through <= 11.12.5.
nvd
CVE-2025-32691P4MEDIUMCVSS 4.9≤ 11.12.62025-04-09
CVE-2025-32691 [MEDIUM] CWE-918 CVE-2025-32691: Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows
Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.12.6.
nvd
CVE-2025-49984P4MEDIUMCVSS 4.9≤ 11.13.112025-06-20
CVE-2025-49984 [MEDIUM] CWE-918 CVE-2025-49984: Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows
Server-Side Request Forgery (SSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Server Side Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.11.
nvd
CVE-2026-32351P4MEDIUMCVSS 5.9≤ 11.15.132026-03-13
CVE-2026-32351 [MEDIUM] CWE-79 CVE-2026-32351: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blubrry PowerPress Podcasting powerpress allows Stored XSS.This issue affects PowerPress Podcasting: from n/a through <= 11.15.13.
nvd
CVE-2025-64201P4MEDIUMCVSS 4.3≤ 11.13.122025-10-29
CVE-2025-64201 [MEDIUM] CWE-352 CVE-2025-64201: Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows C
Cross-Site Request Forgery (CSRF) vulnerability in blubrry PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through <= 11.13.12.
nvd