CVE-2026-125782: WordPress PowerPress Podcasting plugin <= 11.18.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPress Podcasting: from n/a through 11.18.2.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress PowerPress Podcasting pluginto a version that resolves this vulnerability.Fixed in 11.18.3
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that exploitation is network-accessible and requires low-level privileges. No user interaction is required.
What is the likely impact if exploited?
The reported impact is limited to integrity, with no reported confidentiality or availability impact. The issue involves incorrectly configured access-control security levels.
Which versions are affected?
PowerPress Podcasting versions through 11.18.2 are affected. The available data does not identify a fixed version.