Product by Craig Hewitt

Seriously Simple Podcasting

10 known vulnerabilities in Seriously Simple Podcasting (Craig Hewitt), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Seriously Simple Podcasting (Craig Hewitt)

High	CVE-2024-25599	Craig Hewitt Seriously Simple Podcasting: Cross-site Scripting also in 1 other product	7.1	28.03.2024
Medium	CVE-2026-24952	WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability	6.5	03.02.2026
Medium	CVE-2026-39505	WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability	5.3	08.04.2026
Medium	CVE-2025-66059	WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability also in 1 other product	5.3	21.11.2025
Medium	CVE-2025-49923	WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability also in 1 other product	5.9	22.10.2025
Medium	CVE-2025-46261	WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability also in 1 other product	5.9	24.04.2025
Medium	CVE-2025-66060	WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability also in 1 other product	5.3	21.11.2025
Medium	CVE-2026-24360	Craig Hewitt Seriously Simple Podcasting: Server-Side Request Forgery (SSRF)	4.4	22.01.2026
Medium	CVE-2025-62882	WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability also in 1 other product	4.3	27.10.2025
Medium	CVE-2025-66061	Craig Hewitt Seriously Simple Podcasting: Cross-Site Request Forgery (CSRF) also in 1 other product	4.3	21.11.2025