CVE-2026-24637
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
SQL Injection vulnerability in PowerPress Podcasting versions <= 11.15.10 allows attackers to inject malicious SQL queries.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.
Recommendation
It is recommended to update PowerPress Podcasting to the latest version to mitigate this vulnerability.
Other vulnerabilities in PowerPress Podcasting
See all- CVE-2026-16294High
The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perform Server-Side Request Forgery attacks that can target internal services.
- CVE-2026-16293Medium
The PowerPress Podcasting plugin by Blubrry for WordPress before version 11.16.11 does not sanitize and escape some of its Podcast Episode settings, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Original NVD description (English source)
Contributor SQL Injection in PowerPress Podcasting <= 11.15.10 versions.