Known vulnerabilities in PowerPress Podcasting plugin by Blubrry

No. 1 Podcasting plugin for WordPress.

25Reported vulnerabilities

8.8Highest CVSS score

11.17.6Latest version

20,000+Active installs

What to do now

Update PowerPress Podcasting plugin by Blubrry to 11.17.1 or later. 25 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2021-24123	High 7.2	1.6%	Before 8.3.8	`8.3.8`	March 18, 2021
CVE-2024-9230	Medium 5.9	0.3%	Before 11.9.18	`11.9.18`	April 14, 2025
CVE-2015-9410	Medium 5.4	1.2%	6.0.4 to 6.0.4 (inclusive)	`6.0.5`	September 26, 2019
CVE-2023-4820	Medium 5.4	0.4%	Before 11.0.12	`11.0.12`	October 16, 2023
CVE-2015-1385	Medium 4.3	2.2%	6.0 and earlier	`6.0.1`	February 2, 2015
CVE-2025-13536	High 8.8	0.6%	0 to 11.15.2 (inclusive)	`11.15.3`	November 27, 2025
CVE-2024-9227	Medium 4.8	0.3%	Before 11.9.18	`11.9.18`	May 15, 2025
CVE-2025-46264	High 8.8	0.4%	11.12.5 and earlier	`11.12.6`	April 23, 2025
CVE-2026-23798	High 7.5	0.5%	11.15.10 and earlier	`11.15.11`	February 25, 2026
CVE-2026-24637	Medium 6.5	0.3%	11.15.10 and earlier	`11.15.11`	May 20, 2026
CVE-2025-32690	Medium 6.4	0.3%	11.12.5 and earlier	`11.12.6`	April 9, 2025
CVE-2024-9543	Medium 6.4	0.3%	0 to 11.9.18 (inclusive)	`11.9.19`	October 11, 2024
CVE-2024-6588	Medium 6.4	0.4%	0 to 11.9.10 (inclusive)	`11.9.11`	July 12, 2024
CVE-2026-16294	Medium 6.4	0.2%	Before 11.17.1	`11.17.1`	August 14, 2026
CVE-2026-16293	Medium 6.4	0.2%	11.16.10 and earlier	`11.16.11`	July 27, 2026
CVE-2026-12098	Medium 6.4	0.2%	0 to 11.16.8 (inclusive)	`11.16.9`	June 18, 2026
CVE-2026-2988	Medium 6.4	0.2%	0 to 11.15.15 (inclusive)	`11.15.16`	April 8, 2026
CVE-2026-32351	Medium 6.4	0.2%	11.15.13 and earlier	`11.15.14`	February 13, 2026
CVE-2025-49984	Medium 6.4	0.2%	11.13.11 and earlier	`11.13.12`	June 19, 2025
CVE-2025-32691	Medium 5.4	0.3%	11.12.6 and earlier	`11.12.7`	April 9, 2025
CVE-2023-41239	Medium 5.4	0.5%	11.0.6 and earlier	`11.0.7`	August 29, 2023
CVE-2023-1917	Medium 5.4	0.5%	10.0 and earlier	`10.0.2`	June 9, 2023
CVE-2023-30778	Medium 5.4	0.3%	10.0.1 and earlier	`10.0.2`	April 17, 2023
CVE-2025-64201	Medium 4.3	0.1%	11.13.12 and earlier	`11.14`	October 21, 2025
WF-64371d43-3acd-4863-80e4-deab071777b9	Medium 4.4	—	10.2.3 and earlier	`10.2.4`	June 6, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.