Object Injection Vulnerability in Blubrry PowerPress Podcasting for WordPress
CVE-2026-23798

8.8HIGH

Key Information:

Vendor

WordPress
Status
Powerpress Podcasting
Vendor
CVE Published:
5 March 2026

What is CVE-2026-23798?

Blubrry PowerPress Podcasting for WordPress is prone to an Object Injection vulnerability due to improper handling of untrusted data. This flaw can allow attackers to exploit the deserialization process, potentially leading to unauthorized code execution or other malicious activities. The vulnerability specifically affects versions of PowerPress Podcasting up to and including 11.15.10, making it essential for users to update their installations and mitigate the risk.

Affected Version(s)

PowerPress Podcasting 0 <= 11.15.10

References

https://patchstack.com/database/Wordpress/Plugin/powerpre...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Muhammad Yudha - DJ | Patchstack Bug Bounty Program
.