CVE-2023-6444

The Seriously Simple Podcasting WordPress plugin, developed by Castos , is vulnerable to an unauthenticated administrator email disclosure in versions prior to 3.0.0 . An attacker can send a crafted request to the plugin to obtain the podcast owner's email address, which defaults to the site's ad...

CVE-2024-25599

The Seriously Simple Podcasting WordPress plugin (versions 3.0.2 and earlier ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation. This flaw allows an unauthenticated attacker to execute malicious scripts in a v...

CVE-2024-9667

CVE-2024-9667 affects Seriously Simple Podcasting for WordPress (all versions up to and including 3.5.0). The vulnerability is a Reflected Cross-Site Scripting flaw caused by insufficient escaping of add_query_arg in the URL, enabling unauthenticated attackers to inject web scripts into pages exe...

CVE-2022-4571

CVE-2022-4571 affects the Seriously Simple Podcasting WordPress plugin (versions prior to 2.19.1). The issue is caused by the plugin not validating/escaping certain shortcode attributes before output, enabling a stored XSS attack from users with as little as a contributor to target high-privilege...

CVE-2025-46261

CVE-2025-46261 is a stored XSS in the WordPress plugin Seriously Simple Podcasting (versions prior to or up to 3.9.0). The vulnerability stems from improper neutralization of input during web page generation, enabling an attacker to inject scripts that are stored and later executed in users’ brow...

CVE-2024-3751

The Seriously Simple Podcasting WordPress plugin versions prior to 3.3.0 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to properly sanitise and escape certain settings, which allows high-privilege users, such as administrators, to perform XSS attacks. This vuln...

CVE-2025-66061

CVE-2025-66061 is a CSRF vulnerability in WordPress plugin Seriously Simple Podcasting (

CVE-2025-49923

CVE-2025-49923 affects the WordPress plugin Seriously Simple Podcasting (versions up to and including 3.11.1). The vulnerability is a DOM-Based XSS caused by improper input handling during web page generation. Public descriptions consistently cite DOM-based XSS with no exploitation status; Red Ha...

CVE-2025-66060

CVE-2025-66060 affects WordPress plugin Seriously Simple Podcasting (versions up to and including 3.13.0). The Red Hat/NVD/CVE ecosystem entries describe a Missing Authorization/Broken Access Control vulnerability that could allow unauthorized access due to incorrectly configured access control s...

CVE-2025-66059

CVE-2025-66059 affects WordPress plugin Seriously Simple Podcasting (<= 3.13.0). The vulnerability is an unauthenticated information disclosure that allows retrieval of embedded sensitive data, as indicated by the CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) with a base score of 5.3. ...

CVE-2025-62882

CVE-2025-62882 affects the WordPress plugin Seriously Simple Podcasting (≤ 3.13.0). The root cause is an incorrectly configured access control mechanism that allows missing authorization, enabling a broken access control vulnerability. Reported across multiple sources (Red Hat, EU ENISA EUVD, CVE...