CVE-2026-16294

UNKNOWN 0.0

Blubrry PowerPress < 11.17.1 - Contributor+ Server-Side Request Forgery via Podcast Episode Chapters URL

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services.

Vendor	unknown
Product	powerpress podcasting plugin by blubrry
Published	Aug 12, 2026

Stay Ahead of the Next One

Get instant alerts for unknown powerpress podcasting plugin by blubrry

Be the first to know when new unknown vulnerabilities affecting unknown powerpress podcasting plugin by blubrry are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / PowerPress Podcasting plugin by Blubrry

0 < 11.17.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/9363aaff-40d6-41c0-8edd-cbf671240ad2/

Credits

Meher Sudhakar Abbireddi WPScan