cleantalk
Vulnerabilities and Security Researches

PowerPress Podcasting plugin by Blubrry, CVE-2024-9227

CVE, Research URL

CVE-2024-9227

Home page URL

Security reports for PowerPress Podcasting plugin by Blubrry

Application

PowerPress Podcasting plugin by Blubrry

Published on
May 16, 2025
Research Description
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.9.18 does not sanitise and escape some of its settings when adding a podcast, which could allow admin users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected versions
Min -, max 11.9.18.
Status
vulnerable
Previous vulnerability researches
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2024-12738) , Jan 09, 2025
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2024-6366) , Jul 30, 2024
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2025-2314) , Apr 17, 2025
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2022-0884) , Jun 06, 2024
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor (CVE-2014-10380) , Jun 06, 2024
New vulnerability
PowerPress Podcasting plugin by Blubrry (CVE-2024-9227) , May 19, 2025
Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC (CVE-2024-9450) , May 19, 2025
PWA for WP & AMP (CVE-2024-7759) , May 19, 2025
Badgearoo (CVE-2025-1033) , May 19, 2025
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic (CVE-2025-2892) , May 19, 2025