The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Powerpress Plugin | — | Update powerpress plugin to version 11.0.12, or a newer patched version | May 15, 2025 | Sep 13, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub