Skip to main content

Seriously Simple Podcasting CVE-2025-62882

MEDIUM
Missing Authorization (CWE-862)
2025-10-27 audit@patchstack.com
WordPress Authentication Bypass Seriously Simple Podcasting Wordpress Plugin Castos
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

2
Analysis Generated
Jul 26, 2026 - 18:29 vuln.today
CVE Published
Oct 27, 2025 - 02:15 cve.org
MEDIUM 4.3

DescriptionCVE.org

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.

AnalysisAI

Authenticated low-privilege users of the Seriously Simple Podcasting WordPress plugin (version ≤ 3.13.0) can bypass access controls to modify podcast content. This missing authorization flaw (CWE-862) results from incorrectly configured access control security levels. Exploitation has not been observed in the wild (EPSS 0.03%).

More in Seriously Simple Podcasting

View all
CVE-2024-3751 MEDIUM POC
4.8 Jul 13

The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settings, which c
CVE-2024-25599 HIGH
7.1 Mar 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Serio
CVE-2024-9667 MEDIUM
6.1 Nov 05

The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of a
CVE-2025-46261 MEDIUM
5.9 Apr 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Serio
CVE-2025-49923 MEDIUM
5.9 Oct 22

DOM-based XSS in the Seriously Simple Podcasting WordPress plugin (versions through 3.11.1) enables a high-privileged at
CVE-2025-66059 MEDIUM
5.3 Nov 21

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously Simpl
CVE-2025-66060 MEDIUM
5.3 Nov 21

Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Explo
CVE-2026-39505 MEDIUM
5.3 Apr 08

Missing authorization in Craig Hewitt Seriously Simple Podcasting plugin allows unauthenticated attackers to read sensit
CVE-2025-66061 MEDIUM
4.3 Nov 21

Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting

CVE-2022-40132 MEDIUM
4.3 Sep 23

Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2025-62882 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy