CVE-2026-121762

Summary

A CSRF vulnerability in Blubrry Podcasting PowerPress (versions through 11.18.0) allows attackers to trick authenticated users into performing unintended actions on the podcasting plugin, such as modifying podcast settings or publishing content, by exploiting the user's active session.

Exploitability

Exploitation requires social engineering to诱导 a logged-in administrator or authorized user to click a malicious link or visit a crafted page while authenticated; no authentication bypass or complex conditions are needed beyond user interaction.

Blast radius

Successful exploitation could lead to unauthorized modification of podcast content, injection of malicious media links, or full compromise of podcast publishing workflows, potentially affecting audience trust and site integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to PowerPress Podcasting version 11.18.1 or later, which includes a CSRF token fix; if upgrading is not immediately possible, disable the affected administrative endpoints or enforce strict SameSite cookie attributes for session cookies.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.