CVE-2023-6444

Seriously Simple Podcasting WordPress plugin versions prior to 3.0.0 disclose the Podcast owner's email via an unauthenticated crafted request. Impact: unauthorized disclosure of administrator email addresses; remediation: upgrade to version 3.0.0 or later.

CVE-2024-25599

Technical details about CVE-2024-25599 are not provided in the connected documents. Please monitor for updates from vendors/security advisories.

CVE-2022-4571

CVE-2022-4571 affects the Seriously Simple Podcasting WordPress plugin (versions prior to 2.19.1). The issue is caused by the plugin not validating/escaping certain shortcode attributes before output, enabling a stored XSS attack from users with as little as a contributor to target high-privilege...

CVE-2024-9667

CVE-2024-9667 affects Seriously Simple Podcasting for WordPress (all versions up to and including 3.5.0). The vulnerability is a Reflected Cross-Site Scripting flaw caused by insufficient escaping of add_query_arg in the URL, enabling unauthenticated attackers to inject web scripts into pages exe...

CVE-2025-46261

CVE-2025-46261 is a stored XSS in the WordPress plugin Seriously Simple Podcasting (versions prior to or up to 3.9.0). The vulnerability stems from improper neutralization of input during web page generation, enabling an attacker to inject scripts that are stored and later executed in users’ brow...

CVE-2024-3751

The CVE describes a Stored XSS vulnerability in the WordPress plugin Seriously Simple Podcasting, affecting versions prior to 3.3.0. The issue arises because certain settings are not properly sanitized/escaped, enabling high-privilege users (e.g., administrators) to inject script even when unfilt...

CVE-2025-66061

CVE-2025-66061 is a CSRF vulnerability in WordPress plugin Seriously Simple Podcasting (

CVE-2025-49923

CVE-2025-49923 affects the WordPress plugin Seriously Simple Podcasting (versions up to and including 3.11.1). The vulnerability is a DOM-Based XSS caused by improper input handling during web page generation. Public descriptions consistently cite DOM-based XSS with no exploitation status; Red Ha...

CVE-2025-66059

CVE-2025-66059 affects WordPress plugin Seriously Simple Podcasting (<= 3.13.0). The vulnerability is an unauthenticated information disclosure that allows retrieval of embedded sensitive data, as indicated by the CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) with a base score of 5.3. ...

CVE-2025-66060

CVE-2025-66060 affects WordPress plugin Seriously Simple Podcasting (versions up to and including 3.13.0). The Red Hat/NVD/CVE ecosystem entries describe a Missing Authorization/Broken Access Control vulnerability that could allow unauthorized access due to incorrectly configured access control s...

CVE-2025-62882

CVE-2025-62882 affects the WordPress plugin Seriously Simple Podcasting (≤ 3.13.0). The root cause is an incorrectly configured access control mechanism that allows missing authorization, enabling a broken access control vulnerability. Reported across multiple sources (Red Hat, EU ENISA EUVD, CVE...