Vulnerabilities / Seriously Simple Podcasting / WPSEC-2026-1376
Seriously Simple Podcasting <= 3.17.0 - Authenticated (Contributor+) Sensitive Information Exposure of Private and Draft Posts via podcast_episode Shortcode
Medium 4.3
CWE-200Fixed in 3.17.1
- ID
- WPSEC-2026-1376
- Plugin
- Seriously Simple Podcasting (seriously-simple-podcasting)
- Affected
- all versions before 3.17.1
- Remediation
- Update to 3.17.1 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-21
- Attack surface
- Seriously Simple Podcasting on WPSec AttackSurface
- Fix released
- Published
Description
The Seriously Simple Podcasting plugin for WordPress is vulnerable to Sensitive Information Exposure via the [podcast_episode] shortcode in all versions up to, and including, 3.17.0, due to the plugin rendering the title, content, excerpt and player of any post ID passed in the 'episode' attribute without checking its post type, status or whether the current user may read it. This makes it possible for authenticated attackers with contributor-level access and above to read the content of private, draft and pending posts, and the media of non-public episodes, that belong to other users.
References
- https://wpsec.com/vuln/WPSEC-2026-1376/
- https://plugins.svn.wordpress.org/seriously-simple-podcasting/tags/3.17.1/
- https://wordpress.org/plugins/seriously-simple-podcasting/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS