medium4.1
CVE-2026-97354
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media…
Impact
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services.
Affected products
| Product | Affected versions |
|---|---|
| PowerPress Podcasting Plugin By Blubrry WordPress Plugin | before 11.17.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.