PowerPress Podcasting plugin by Blubrry

No attacker login is required. A caller can reach a protected operation without its intended permission check. The resource, operation and request fields are undisclosed. The supplied vector reports limited integrity impact, limited availability impact. The vector requires no victim interaction. Affected versions: <= 11.17.9. The authoritative export identifies 11.17.11 as fixed for this CVE.

No attacker login is required by the supplied CVSS vector. An attacker can induce a victim to submit an unintended request using the victim's session authority. The vector requires victim interaction and reports limited confidentiality, integrity and availability impact. The victim's required role and the forged operation are undisclosed. The authoritative export does not identify the vulnerable endpoint, action, parameter or function, so the exact request-to-operation path is undisclosed. Affected versions: <= 11.17.9. The authoritative export identifies 11.17.11 as fixed for this CVE.

No attacker login is required by the supplied CVSS vector. A caller can reach a protected operation without the intended permission check. The vector indicates limited disclosure of protected information. No victim interaction is required by the vector. The protected resource and exact unauthorized operation are undisclosed. The authoritative export does not identify the vulnerable endpoint, action, parameter or function, so the exact request-to-operation path is undisclosed. Affected versions: <= 11.17.9. The authoritative export identifies 11.17.11 as fixed for this CVE.

PowerPress before 11.17.2 lets a Contributor or higher store a block attribute that reaches page output without adequate sanitization or escaping. Script can run in the browser of a user viewing the affected content, including a privileged reviewer. The block, attribute name and rendering function are unspecified.

PowerPress Podcasting before 11.17.1 lets a Contributor submit Powerpress[$FeedSlug][pci_chapters_url] in the podcast episode metabox. Save validation mistakenly checks a different chapterURL value and stores the unvalidated chapters URL. chapters_tab() later assigns that stored value to chapters_req_url and calls file_get_contents(), enabling server-side requests to internal services. The reachable schemes and ports, redirect and DNS behavior, and response-exfiltration depth are not disclosed.

PowerPress Podcasting plugin by Blubrry is affected by cross-site scripting. Exploitation requires an authenticated author account. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 11.16.8.

PowerPress Podcasting is affected by SQL injection. Exploitation requires an authenticated contributor account. A successful request can alter database queries and expose or modify WordPress data. The published affected range is n/a through 11.15.10.

PowerPress Podcasting is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

Blubrry PowerPress is affected by dangerous file upload. Exploitation requires an authenticated contributor account. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PowerPress Podcasting is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PowerPress Podcasting is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.

PowerPress Podcasting plugin by Blubrry is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PowerPress Podcasting plugin by Blubrry is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.

PowerPress Podcasting is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting plugin by Blubrry is affected by cross-site scripting. Exploitation requires an authenticated contributor account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting plugin by Blubrry is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress Podcasting plugin by Blubrry is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.

PowerPress Podcasting plugin by Blubrry is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

Powerpress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress is affected by cross-site scripting. Exploitation requires an authenticated contributor account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PowerPress is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

Powerpress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

Powerpress is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.