Product by Castos

    Craig Hewitt Seriously Simple Podcasting

    14 known vulnerabilities in Craig Hewitt Seriously Simple Podcasting (Castos), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Craig Hewitt Seriously Simple Podcasting (Castos)
    MediumCVE-2023-6444

    Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

    		5.3
    MediumCVE-2026-112833

    WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-112834

    WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability

    		5.3
    HighCVE-2024-25599

    Craig Hewitt Seriously Simple Podcasting: Cross-site Scripting

    also in 1 other product

    		7.1
    MediumCVE-2024-9667

    Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter

    		6.1
    MediumCVE-2022-4571

    Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2025-66059

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

    also in 1 other product

    		5.3
    MediumCVE-2025-49923

    WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2024-3751

    Seriously Simple Podcasting < 3.3.0 - Admin+ Stored XSS

    		4.8
    MediumCVE-2025-46261

    WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		5.9
    MediumCVE-2025-66060

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

    also in 1 other product

    		5.3
    MediumCVE-2022-40132

    Castos Seriously Simple Podcasting (WordPress plugin): Cross-Site Request Forgery (CSRF)

    		5.4
    MediumCVE-2025-62882

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2025-66061

    Craig Hewitt Seriously Simple Podcasting: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3

    All products by Castos