MEDIUM 4.1 NVD

CVE-2026-97354

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services.

References

https://wpscan.com/vulnerability/473239c2-0b66-466b-98ac-391dad2853b9/

Published: 2026-10-07 · Source: NVD · Feed updated: 2026-10-12

This medium severity vulnerability with a CVSS score of 4.1 was published on 2026-10-07 via NVD.

vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.