6.8
Moyenne
CVE-2026-16293 The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its…
Description
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.16.11 does not sanitise and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PowerPress Podcasting plugin by Blubrry 11.16 | premières → < 11.16.11 | 11.16.11 |
Autres CVE de PowerPress Podcasting plugin by Blubrry
Les 7 CVE de PowerPress Podcasting plugin by Blubrry →
CVE-2026-97354
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of…
4.1
Moyenne
CVE-2026-97319
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.2 does not sanitize and escape a block…
6.8
Moyenne
CVE-2026-16294
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode…
7.1
Élevée
CVE-2024-9227
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its…
4.8
Moyenne