high7.1
CVE-2026-16294
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a serve…
Impact
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services.
Affected products
| Product | Affected versions |
|---|---|
| PowerPress Podcasting Plugin By Blubrry WordPress Plugin | before 11.17.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.