What’s Vulnerable › Products
Craig Hewitt Seriously Simple Podcasting vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Check whether your Craig Hewitt Seriously Simple Podcasting version is affected
Latest Craig Hewitt Seriously Simple Podcasting vulnerabilities
- CVE-2026-112834 — WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-112833 — WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-39505 — WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-24952 — WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2026-24360 — WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4)
- CVE-2025-66061 — WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2025-66060 — WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2025-66059 — WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2025-62882 — WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2025-49923 — WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- CVE-2025-46261 — WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2024-9667 — Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter (CVSS 6.1)
- CVE-2024-3751 — Seriously Simple Podcasting < 3.3.0 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2024-25599 — WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
- CVE-2023-6444 — Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure (CVSS 5.3)
- CVE-2022-4571 — Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS (CVSS 5.4)
- CVE-2022-40132 — WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3)