6.8
Medium
CVE-2026-97319 The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block…
Description
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block attribute before outputting it in a page, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerPress Podcasting plugin by Blubrry 11.17 | earliest → < 11.17.2 | 11.17.2 |
Other CVEs of PowerPress Podcasting plugin by Blubrry
The 7 CVEs of PowerPress Podcasting plugin by Blubrry →
CVE-2026-97354
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of…
4.1
Medium
CVE-2026-16294
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode…
7.1
High
CVE-2026-16293
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its…
6.8
Medium
CVE-2024-9227
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its…
4.8
Medium