PatchTheCVE: seriously simple podcastinghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-62882: Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting alhttps://patchthecve.com/cve/CVE-2025-62882.htmlhttps://patchthecve.com/cve/CVE-2025-62882.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.CVE-2025-46261: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hehttps://patchthecve.com/cve/CVE-2025-46261.htmlhttps://patchthecve.com/cve/CVE-2025-46261.htmlWed, 17 Jun 2026 09:26:07 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.9.0.CVE-2024-9667: The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to thhttps://patchthecve.com/cve/CVE-2024-9667.htmlhttps://patchthecve.com/cve/CVE-2024-9667.htmlWed, 17 Jun 2026 08:25:01 +0000MEDIUM 6.1: The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.5.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripCVE-2024-3751: The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settinghttps://patchthecve.com/cve/CVE-2024-3751.htmlhttps://patchthecve.com/cve/CVE-2024-3751.htmlWed, 17 Jun 2026 07:44:56 +0000MEDIUM 4.8: The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)CVE-2024-25599: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hehttps://patchthecve.com/cve/CVE-2024-25599.htmlhttps://patchthecve.com/cve/CVE-2024-25599.htmlWed, 17 Jun 2026 07:16:14 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through <= 3.0.2.CVE-2023-6444: The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (whihttps://patchthecve.com/cve/CVE-2023-6444.htmlhttps://patchthecve.com/cve/CVE-2023-6444.htmlWed, 17 Jun 2026 06:50:46 +0000MEDIUM 5.3: The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an unauthenticated crafted request.