CVE-2026-121766: WordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerability

Q: Which PowerPress Podcasting versions are affected?

The issue affects PowerPress Podcasting through version 11.18.0. The available data does not identify a fixed version.

Q: What configuration condition is associated with exploitation?

The vulnerability involves incorrectly configured access-control security levels. The provided information does not specify the affected setting, required attacker privileges, or whether default configurations are vulnerable.

Published Nov 7, 2026

Updated

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPress Podcasting: from n/a through 11.18.0.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress PowerPress Podcasting plugin to a version that resolves this vulnerability.
Fixed in 11.18.2

Event History

Nov 7, 2026

CVE Published

via MITRE·09:09 AM

Data Sourced

via MITRE·09:09 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which PowerPress Podcasting versions are affected?

The issue affects PowerPress Podcasting through version 11.18.0. The available data does not identify a fixed version.

What configuration condition is associated with exploitation?

The vulnerability involves incorrectly configured access-control security levels. The provided information does not specify the affected setting, required attacker privileges, or whether default configurations are vulnerable.

CVE-2026-121766: WordPress PowerPress Podcasting plugin <= 11.18.0 - Broken Access Control vulnerability

Remediation

Event History

Frequently Asked Questions

Which PowerPress Podcasting versions are affected?

What configuration condition is associated with exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which PowerPress Podcasting versions are affected?

What configuration condition is associated with exploitation?