Visit Website →

Recent Items

CVE-2026-16294 — Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL

Affected: Unknown PowerPress Podcasting plugin by Blubrry

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services.

Updated on 2026-10-12T12:18:41.229297+00:00