CSRF Vulnerability in Blubrry Podcasting PowerPress Plugin

CVE-2026-104407

What is CVE-2026-104407?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Blubrry Podcasting PowerPress plugin, affecting all versions from n/a through 11.17.9. This security flaw allows malicious actors to perform unauthorized actions on behalf of authenticated users, potentially leading to significant security breaches. Website administrators using this plugin should take immediate action to mitigate the risks associated with this vulnerability, including applying available updates, implementing security best practices, and monitoring for suspicious activity.

References