Threat Entry Updated 2025-06-05

CVE-2024-9227 - Powerpress Podcasting Plugin By Blubrry

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow admin users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

PLUGIN Powerpress Podcasting Plugin By Blubrry

CVE-2024-9227

MEDIUM CVSS 4.8 2025-05-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-04-29

CVE-2024-9230 - Powerpress Podcasting Plugin By Blubrry

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow author and above users to perform Stored Cross-Site Scripting attacks

PLUGIN Powerpress Podcasting Plugin By Blubrry

CVE-2024-9230

MEDIUM CVSS 5.9 2025-04-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-10-15

CVE-2024-9543 - Powerpress Podcasting Plugin By Blubrry

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'skipto' shortcode in all versions up to, and including, 11.9.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

PLUGIN Powerpress Podcasting Plugin By Blubrry

CVE-2024-9543

MEDIUM CVSS 6.4 2024-10-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-6588 - Powerpress Podcasting Plugin By Blubrry

The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘media_url’ parameter in all versions up to, and including, 11.9.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

PLUGIN Powerpress Podcasting Plugin By Blubrry

CVE-2024-6588

MEDIUM CVSS 6.4 2024-07-12

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2025-03-05

CVE-2023-4820 - Powerpress Podcasting Plugin By Blubrry

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.

PLUGIN Powerpress Podcasting Plugin By Blubrry

CVE-2023-4820

MEDIUM CVSS 5.4 2023-10-16

Risk Score

Open Full Technical Breakdown