Vulnerabilities / Seriously Simple Podcasting
Seriously Simple Podcasting vulnerabilities
Advisories WPSec published for Seriously Simple Podcasting. Other sources may list more. Its attack surface: Seriously Simple Podcasting on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1377 | Seriously Simple Podcasting <= 3.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via podcast_playlist Shortcode 'type' Attribute | Medium 6.4 | 3.17.1 |
| 2026-10-21 | WPSEC-2026-1376 | Seriously Simple Podcasting <= 3.17.0 - Authenticated (Contributor+) Sensitive Information Exposure of Private and Draft Posts via podcast_episode Shortcode | Medium 4.3 | 3.17.1 |
| 2026-10-21 | WPSEC-2026-1375 | Seriously Simple Podcasting <= 3.17.0 - Unauthenticated Missing Authorization to Edit-Context Episode Data via REST API | Medium 5.3 | 3.17.1 |
| 2026-10-21 | WPSEC-2026-1374 | Seriously Simple Podcasting <= 3.17.0 - Unauthenticated Sensitive Information Exposure of Password-Protected Episode Media via REST API and Playlist AJAX | Medium 5.3 | 3.17.1 |
License: CC BY 4.0