Vulnerabilities / Seriously Simple Podcasting / WPSEC-2026-1374
Seriously Simple Podcasting <= 3.17.0 - Unauthenticated Sensitive Information Exposure of Password-Protected Episode Media via REST API and Playlist AJAX
Medium 5.3
CWE-200Fixed in 3.17.1
- ID
- WPSEC-2026-1374
- Plugin
- Seriously Simple Podcasting (seriously-simple-podcasting)
- Affected
- all versions before 3.17.1
- Remediation
- Update to 3.17.1 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-21
- Attack surface
- Seriously Simple Podcasting on WPSec AttackSurface
- Fix released
- Published
Description
The Seriously Simple Podcasting plugin for WordPress is vulnerable to Sensitive Information Exposure via the REST API episode fields (download link, player link, player and meta), the playlist AJAX response and the episode download route in all versions up to, and including, 3.17.0, due to the media URL and excerpt of an episode being returned without checking whether the episode is password-protected. This makes it possible for unauthenticated attackers to obtain the media file URLs and excerpt text of password-protected episodes without knowing the password.
References
- https://wpsec.com/vuln/WPSEC-2026-1374/
- https://plugins.svn.wordpress.org/seriously-simple-podcasting/tags/3.17.1/
- https://wordpress.org/plugins/seriously-simple-podcasting/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS