https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-62882.htmlhttps://patchthecve.com/cve/CVE-2025-62882.htmlThu, 08 Oct 2026 11:10:00 +0000MEDIUM 4.3: Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.https://patchthecve.com/cve/CVE-2025-46261.htmlhttps://patchthecve.com/cve/CVE-2025-46261.htmlWed, 17 Jun 2026 09:26:07 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.9.0.https://patchthecve.com/cve/CVE-2024-9667.htmlhttps://patchthecve.com/cve/CVE-2024-9667.htmlWed, 17 Jun 2026 08:25:01 +0000MEDIUM 6.1: The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.5.0. This makes it possible for unauthenticated attackers to inject arbitrary web scriphttps://patchthecve.com/cve/CVE-2024-8738.htmlhttps://patchthecve.com/cve/CVE-2024-8738.htmlWed, 17 Jun 2026 08:23:12 +0000MEDIUM 6.1: The Seriously Simple Stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.6.0. This makes it possible for unauthenticated attackers to inject arbitrary web scripts inhttps://patchthecve.com/cve/CVE-2024-3751.htmlhttps://patchthecve.com/cve/CVE-2024-3751.htmlWed, 17 Jun 2026 07:44:56 +0000MEDIUM 4.8: The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)