CVE-2026-104407
Received Received - Intake

Cross-Site Request Forgery in PowerPress Podcasting

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: from n/a through 11.17.9.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-104407
EUVD
EUVD-2026-92306

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
blubrry powerpress to 11.17.9 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Cross-Site Request Forgery (CSRF) vulnerability in the Blubrry Podcasting PowerPress plugin. It allows attackers to trick users into executing unwanted actions on the affected website without their consent.

Impact Analysis

An attacker could perform actions on your behalf, such as changing settings, publishing content, or modifying podcast feeds without your knowledge. This could lead to unauthorized changes or data exposure.

Compliance Impact

This vulnerability could lead to unauthorized modifications or data leaks, potentially violating GDPR (data protection) or HIPAA (health data privacy) if sensitive information is exposed or altered.

Mitigation Strategies

Update PowerPress Podcasting to the latest version beyond 11.17.9 to address the CSRF vulnerability. Implement CSRF tokens in forms and ensure proper authentication checks are in place for sensitive actions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-104407. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart