powerpress vulnerabilities
CVEs whose affected-version data names the powerpress package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-104387High· 7.2Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions.
▾ Twilightblubrry · powerpressEPSS 0.32%via NVD
CVE-2026-104407High· 7.1Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
▾ TwilightBlubrry Podcasting · powerpressEPSS 0.10%via NVD
CVE-2026-104388Medium· 5.3Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/a through 11.17.9.
▾ SunlitBlubrry Podcasting · powerpressEPSS 0.23%via NVD