https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-07T17:52:42.535364+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-97354 fkie_cve-2026-97354 2026-10-07T17:52:42.555364+00:00

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services.

 https://db.gcve.eu/vuln/ghsa-w4jr-6783-p796 GHSA-w4jr-6783-p796 2026-10-07T17:52:42.555423+00:00

The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users with the contributor role and above to perform Server-Side Request Forgery attacks against internal services.