Advisories · Technology

Craig Hewitt Seriously Simple Podcasting.

Every CVE that names Craig Hewitt Seriously Simple Podcasting among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39505 CVE record

CVSS 5.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.14.2 - Broken Access Control vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Broken access control
Not analysed yet 8 Apr 2026
CVE-2026-24952 CVE record

CVSS 6.5 Medium

WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Cross Site Scripting (XSS) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2026
CVE-2026-24360 CVE record

CVSS 4.4 Medium

WordPress Seriously Simple Podcasting plugin <= 3.14.1 - Server Side Request Forgery (SSRF) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Server-side request forgery (SSRF)
Not analysed yet 22 Jan 2026
CVE-2025-66061 CVE record

CVSS 4.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Cross-site request forgery (CSRF)
Not analysed yet 21 Nov 2025
CVE-2025-66060 CVE record

CVSS 5.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Broken access control
Not analysed yet 21 Nov 2025
CVE-2025-66059 CVE record

CVSS 5.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Information disclosure
Not analysed yet 21 Nov 2025
CVE-2025-62882 CVE record

CVSS 4.3 Medium

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Broken access control
Not analysed yet 27 Oct 2025
CVE-2025-49923 CVE record

CVSS 5.9 Medium

WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Cross-site scripting (XSS)
Not analysed yet 22 Oct 2025
CVE-2025-46261 CVE record

CVSS 5.9 Medium

WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Cross-site scripting (XSS)
Not analysed yet 24 Apr 2025
CVE-2024-25599 CVE record

CVSS 7.1 High

WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
- Craig Hewitt Seriously Simple Podcasting
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2024