CVE-2026-112834: WordPress Seriously Simple Podcasting plugin <= 3.17.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/seriously-simple-podcastingto a version that resolves this vulnerability.Fixed in 3.17.1
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates it is remotely exploitable over the network with low attack complexity, requires no privileges, and does not require user interaction.
What is the likely security impact?
The reported impact is limited to confidentiality. The CVSS vector indicates low confidentiality impact and no integrity or availability impact.
Which installations are affected?
Castos Seriously Simple Podcasting versions through 3.17.0 are affected. The provided data does not identify a fixed version or configuration-specific limitation.