blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-4820

MEDIUM 5.4 CVSS 3.1
Published
October 16, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users with privileges as low as contributor to inject arbitrary web scripts that could target a site admin or superadmin.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown PowerPress Podcasting plugin by Blubrry — Before 11.0.12
  • blubrry powerpress — Before 11.0.12

References

  • wpscan.com https://wpscan.com/vulnerability/e866a214-a142-43c7-b93d-ff2301a3e432 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record