---
id: "CVE-2026-125782"
page: "https://infrastack.ai/live/CVE-2026-125782"
kind: "vulnerability"
aliases: ["CVE-2026-125782"]
title: "PowerPress Podcasting WordPress plugin: missing authorization check through 11.18.2"
severity: "medium"
cvss: 4.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "powerpress", "self-hosted", "wordpress"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-11-11T13:17:23+00:00"
first_seen_at: "2026-11-11T13:27:15+00:00"
updated_at: "2026-11-11T13:29:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125782", "first_seen_at": "2026-11-11T13:27:15+00:00"}]
exploit_sources: []
---

# PowerPress Podcasting WordPress plugin: missing authorization check through 11.18.2

Link for people: https://infrastack.ai/live/CVE-2026-125782 (this .md is for agents)

The PowerPress Podcasting WordPress plugin by Blubrry is missing an authorization check, so access control is not enforced as intended. The sources do not say what data or actions an attacker gains beyond that.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed PowerPress version in the WordPress admin plugin list or in the plugin's `powerpress.php` header.
- Compare against the affected range: all versions through `11.18.2`.

## Fix

- PowerPress Podcasting: unknown; the sources do not name a fixed version.

## Timeline

- 2026-11-11T13:27:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125782

## From the sources

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PowerPress Podcasting: from n/a through 11.18.2.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_