Blubrry PowerPress Podcasting Plugin PHP Object Injection Vulnerability

A deserialization vulnerability allowing object injection has been identified in the Blubrry PowerPress Podcasting plugin, affecting versions through 11.15.10. This vulnerability could lead to various impacts, including code execution, SQL injection, path traversal, and denial of service, if exploited within a proper PHP object injection chain.

Impact

Exploitation of this vulnerability could allow for PHP object injection, potentially leading to code execution, SQL injection, path traversal, denial of service, and more, depending on the presence of a suitable object injection chain.

Remediation

Users of the Blubrry PowerPress Podcasting plugin should update to version 11.15.11 or later. Patchstack users can enable auto-update for vulnerable plugins.