Threats tagged 'ghsa-vj5m-w997-qqr7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.3%	CVE-2026-16294PowerPress Podcasting plugin by Blubrry · Server-Side Request Forgery (SSRF) High7.1EPSS 0.3%2026-08-12CVE Database V5CVE-2026-16294 The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services. EPSS 0.3%Vulnerability CWE-918 #ghsa-vj5m-w997-qqr7	CVE Database V5	2026-08-12

Page 1 of 1