WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
powerpress
Published
2025-04-09
Title
PowerPress Podcasting < 11.12.7 - Contributor+ SSRF
Slug
powerpress
Published
2025-04-23
Title
PowerPress Podcasting plugin by Blubrry < 11.12.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
powerpress
Published
2025-06-19
Title
PowerPress Podcasting < 11.13.12 - Contributor+ Server-Side Request Forgery
Slug
powerpress
Published
2025-10-21
Title
PowerPress Podcasting < 11.14 - Cross-Site Request Forgery
Slug
powerpress
Published
2025-11-26
Title
Blubrry PowerPress < 11.15.3 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'
Slug
powerpress
Published
2026-02-25
Title
PowerPress Podcasting plugin by Blubrry < 11.15.11 - Authenticated (Contributor+) PHP Object Injection
Slug
powerpress
Published
2026-04-07
Title
Blubrry PowerPress < 11.15.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via powerpress and podcast Shortcodes
Slug
powerpress
Published
2026-02-13
Title
PowerPress Podcasting < 11.15.14 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
powerpress
Published
2026-05-20
Title
PowerPress Podcasting plugin by Blubrry < 11.15.11 - Authenticated (Contributor+) SQL Injection
Slug
powerpress
Published
2026-06-17
Title
PowerPress Podcasting plugin by Blubrry < 11.16.9 - Authenticated (Author+) Stored Cross-Site Scripting via 'embed' Episode Meta Field
Slug
powerpress
Published
2026-07-27
Title
Blubrry PowerPress < 11.16.11 - Contributor+ Stored XSS via Podcast Episode Chapters URL
Slug
powerpress
Published
2026-08-10
Title
Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL
Slug
powerpress
Published
2026-10-05
Title
PowerPress Podcasting plugin by Blubrry < 11.17.11 - Missing Authorization
Slug
powerpress
Published
2026-10-05
Title
PowerPress Podcasting plugin by Blubrry < 11.17.11 - Unauthenticated Information Exposure
Slug
powerpress
Published
2026-10-05
Title
PowerPress Podcasting plugin by Blubrry < 11.17.11 - Cross-Site Request Forgery
Slug
powerpress
Published
2026-09-25
Title
PowerPress < 11.17.2 - Contributor+ Stored XSS via Podcast Player Block
Slug
powerpress
Published
2026-10-05
Title
PowerPress 11.13.12 - 11.17.9 - Contributor+ SSRF via Media URL Redirects
Slug
powerpress-multisite
Published
2025-04-03
Title
Blubrry PowerPress Podcasting plugin MultiSite add-on <= 0.1.1 - Reflected Cross-Site Scripting
Slug
powers-triggers-of-woo-to-chat
Published
2025-01-07
Title
Powerful Auto Chat <= 1.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
powies-uptime-robot
Published
2025-06-05
Title
Powie's Uptime Robot <= 0.9.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
powies-whois
Published
2020-07-09
Title
Powie's WHOIS Domain Check < 0.9.33 - Authenticated Stored Cross-Site Scripting
Slug
powr-pack
Published
2023-11-10
Title
POWR < 2.2.0 - Contributor+ Stored XSS
Slug
ppo-call-to-actions
Published
2025-01-20
Title
PPO Call To Actions <= 0.1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ppv-live-webcams
Published
2025-02-03
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.3.1 - Unauthenticated Arbitrary File Deletion
Slug
ppv-live-webcams
Published
2025-04-10
Title
Paid Videochat Turnkey Site < 7.3.12 - Authentication Bypass