EUVD-2026-57088
GHSA-vj5m-w997-qqr7
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Network-accessible WordPress endpoint exploitable by any Contributor account with no interaction; SSRF delivers high confidentiality impact against internal services, low integrity impact via arbitrary outbound requests, and no availability impact.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services.
AnalysisAI
Server-Side Request Forgery in the PowerPress Podcasting plugin by Blubrry for WordPress (versions before 11.17.1) allows any authenticated Contributor-level user to supply arbitrary URLs in the Podcast Episode URL settings field, causing the server to issue unvalidated HTTP requests that can reach internal network services, cloud metadata endpoints, or other systems not directly exposed to the internet. The CVSS 7.1 score reflects high confidentiality impact against reachable internal services, and a publicly available proof-of-concept combined with a 13% EPSS score makes this an actionable priority for WordPress site operators running the plugin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated WordPress session with at minimum the Contributor role on a site running the PowerPress Podcasting plugin in a version prior to 11.17.1. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N correctly positions this as a network-exploitable, low-complexity, low-privilege vulnerability with high confidentiality and low integrity impact - a risk profile that elevates remediation priority significantly in multi-author WordPress environments. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the PowerPress Podcasting plugin by Blubrry to version 11.17.1 or later, which introduces validation of the Podcast Episode URL setting prior to performing server-side requests; this fix is confirmed available from the vendor and documented in the WPScan advisory at https://wpscan.com/vulnerability/9363aaff-40d6-41c0-8edd-cbf671240ad2/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of WordPress instances using PowerPress plugin and identify all deployments running versions before 11.17.1. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Stored Cross-Site Scripting in the PowerPress Podcasting plugin by Blubrry (WordPress) before version 11.16.11 allows an
Stored Cross-Site Scripting in PowerPress Podcasting plugin by Blubrry (WordPress, versions ≤ 11.16.8) allows authentica
Stored cross-site scripting in Blubrry PowerPress plugin versions up to 11.15.15 allows authenticated contributors and a
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today