CVE-2025-62882
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The Seriously Simple Podcasting (seriously-simple-podcasting) plugin has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.13.0.
Risk Assessment
The risk is the possibility of unauthorized access to administrative functions of the plugin, which could lead to unauthorized changes or data leakage.
Recommendation
It is recommended to update the Seriously Simple Podcasting plugin to the latest version that includes the fix for the missing authorization.
Other vulnerabilities in Seriously Simple Podcasting
See all- CVE-2026-39505Medium
The WordPress plugin Seriously Simple Podcasting up to version 3.14.2 suffers from a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
- CVE-2025-49923Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS. This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1.
Original NVD description (English source)
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS