Access Control Flaw in Blubrry Podcasting PowerPress Plugin
CVE-2026-121766

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Powerpress Podcasting
Vendor
CVE Published:
7 November 2026

What is CVE-2026-121766?

A significant vulnerability exists in the Blubrry Podcasting PowerPress plugin, where access control is incorrectly configured, allowing unauthorized actions. This flaw affects versions of the plugin up to and including 11.18.0, posing a risk to users who may inadvertently expose sensitive functionalities. Proper access control measures should be enforced to mitigate the risk of exploitation.

Affected Version(s)

PowerPress Podcasting 0 <= 11.18.0

References

https://patchstack.com/database/wordpress/plugin/powerpre...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Tang | Patchstack Bug Bounty Program
.