CVE-2025-13536

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-13536", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-21T23:56:20.385Z", "datePublished": "2025-11-27T08:27:05.451Z", "dateUpdated": "2026-04-08T17:25:45.186Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:25:45.186Z"}, "affected": [{"vendor": "blubrry", "product": "PowerPress Podcasting plugin by Blubrry", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "11.15.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "title": "Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368"}, {"url": "https://plugins.trac.wordpress.org/changeset/3402635/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "cweId": "CWE-434", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "ISMAILSHADOW"}], "timeline": [{"time": "2025-11-26T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-28T16:02:20.634608Z", "id": "CVE-2025-13536", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T16:02:50.847Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-13536", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-11-28T16:02:20.634608Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-28T16:02:38.394Z"}}], "cna": {"title": "Blubrry PowerPress <= 11.15.2 - Authenticated (Contributor+) Arbitrary File Upload via 'powerpress_edit_post'", "credits": [{"lang": "en", "type": "finder", "value": "ISMAILSHADOW"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "blubrry", "product": "PowerPress Podcasting plugin by Blubrry", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "11.15.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-11-26T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012"}, {"url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368"}, {"url": "https://plugins.trac.wordpress.org/changeset/3402635/"}], "descriptions": [{"lang": "en", "value": "The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-27T08:27:05.451Z"}}}, "cveMetadata": {"cveId": "CVE-2025-13536", "state": "PUBLISHED", "dateUpdated": "2025-11-28T16:02:50.847Z", "dateReserved": "2025-11-21T23:56:20.385Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-27T08:27:05.451Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "PowerPress Podcasting plugin by Blubrry", "vendor": "blubrry", "versions": [{"lessThanOrEqual": "11.15.2", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Blubrry PowerPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 11.15.2. This is due to the plugin validating file extensions but not halting execution when validation fails in the 'powerpress_edit_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible."}, {"lang": "es", "value": "El plugin Blubrry PowerPress para WordPress es vulnerable a la carga arbitraria de archivos debido a una validaci\u00f3n insuficiente del tipo de archivo en todas las versiones hasta la 11.15.2, inclusive. Esto se debe a que el plugin valida las extensiones de archivo, pero no detiene la ejecuci\u00f3n cuando la validaci\u00f3n falla en la funci\u00f3n 'powerpress_edit_post'. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador o superior, carguen archivos arbitrarios en el servidor del sitio afectado, lo que puede hacer posible la ejecuci\u00f3n remota de c\u00f3digo."}], "id": "CVE-2025-13536", "lastModified": "2026-10-19T13:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13536", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-11-28T16:02:20.634608Z", "version": "2.0.3"}}]}, "published": "2025-11-27T09:15:45.687", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L2368"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3012"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/powerpress/tags/11.14.1/powerpressadmin.php#L3068"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3402635/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d420ee49-e7b3-43d8-a263-8a93abd1133c?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T01:15:15.331499+00:00", "value": {"mitigation_remediation": ["Upgrade PowerPress to the latest release (11.15.3 or newer) which removes the unchecked file upload path.", "If upgrading immediately is not feasible, block Contributor roles from uploading files or remove the powerpress_edit_post capability from those users.", "Apply an additional layer of file\u2011type validation or a security plugin that restricts uploads to approved MIME types and extensions."], "summary": {"action": "Patch Immediately", "impact": "Arbitrary File Upload"}, "threat_synthesis": {"affected_systems": "The vulnerability affects all installations of the Blubrry PowerPress Podcasting plugin through version 11.15.2 inclusive. Administrators, authors, editors, or any user with a Contributor role or higher who can edit posts with the plugin present are at risk.", "description_and_impact": "The Blubrry PowerPress Podcasting plugin for WordPress allows authenticated users with Contributor-level access to upload arbitrary files due to incomplete file type validation. The plugin checks file extensions but does not stop the upload when validation fails, letting an attacker place any file on the server. Depending on the uploaded file type, this can lead to remote code execution or other malicious actions on the site.", "risk_and_exploitability": "The CVSS base score of 8.8 indicates a high severity vulnerability, but the EPSS score of less than 1% suggests that exploitation probability is currently low. Although the vulnerability is not yet listed in CISA KEV, the possibility of remote code execution warrants immediate attention. Attackers would need valid Contributor credentials and access to the WordPress admin interface, after which they could upload a malicious file and execute it on the server."}}}}, "created": "2025-11-27T16:26:07.109707+00:00", "updated": "2026-04-21T01:15:20.140934+00:00", "vendors": ["blubrry", "blubrry$PRODUCT$powerpress", "blubrry$PRODUCT$powerpress_podcasting", "wordpress", "wordpress$PRODUCT$wordpress"]}