WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
powerpress
Published
2023-04-11
Title
PowerPress < 10.0.2 - Contributor+ Stored Cross-Site Scripting
Slug
powerpress
Published
2023-04-17
Title
PowerPress Podcasting < 10.0.2 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-09-25
Title
PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
Slug
powerpress
Published
2023-08-29
Title
PowerPress Podcasting < 11.0.7 - Contributor+ SSRF
Slug
powerpress
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
powerpress
Published
2024-07-11
Title
PowerPress Podcasting plugin by Blubrry < 11.9.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via media_url Parameter
Slug
powerpress
Published
2024-10-10
Title
Powerpress < 11.9.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via skipto Shortcode
Slug
powerpress
Published
2024-08-29
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS
Slug
powerpress
Published
2025-03-24
Title
PowerPress Podcasting < 11.9.18 - Author+ XSS via Podcast URL
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.6 - Contributor+ Stored XSS
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.7 - Contributor+ SSRF
Slug
powerpress
Published
2025-04-23
Title
PowerPress Podcasting plugin by Blubrry < 11.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2025-06-19
Title
PowerPress Podcasting < 11.13.12 - Contributor+ Server-Side Request Forgery
Slug
powerpress
Published
2025-10-21
Title
PowerPress Podcasting < 11.14 - Cross-Site Request Forgery
Slug
powerpress
Published
2025-11-26
Title
Blubrry PowerPress < 11.15.3 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
Slug
powerpress
Published
2026-02-25
Title
PowerPress Podcasting plugin by Blubrry < 11.15.11 - Authenticated (Contributor+) PHP Object Injection
Slug
powerpress
Published
2026-04-07
Title
Blubrry PowerPress < 11.15.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes
Slug
powerpress
Published
2026-02-13
Title
PowerPress Podcasting < 11.15.14 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
powerpress
Published
2026-05-20
Title
PowerPress Podcasting plugin by Blubrry < 11.15.11 - Authenticated (Contributor+) SQL Injection
Slug
powerpress
Published
2026-06-17
Title
PowerPress Podcasting plugin by Blubrry < 11.16.9 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field
Slug
powerpress-multisite
Published
2025-04-03
Title
Blubrry PowerPress Podcasting plugin MultiSite add-on <= 0.1.1 - Reflected Cross-Site Scripting
Slug
powers-triggers-of-woo-to-chat
Published
2025-01-07
Title
Powerful Auto Chat <= 1.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
powies-uptime-robot
Published
2025-06-05
Title
Powie's Uptime Robot <= 0.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
powies-whois
Published
2020-07-09
Title
Powie's WHOIS Domain Check < 0.9.33 - Authenticated Stored Cross-Site Scripting
Slug
powr-pack
Published
2023-11-10
Title
POWR < 2.2.0 - Contributor+ Stored XSS