Live › vulnerability › CVE-2026-112834
Go to dashboardThe Seriously Simple Podcasting WordPress plugin by Castos has a missing authorization check, so a request can reach functionality its caller should not be allowed to use. The sources say the flaw affects all versions through 3.17.0 and do not describe the exact data or actions exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Seriously Simple Podcasting plugin at version 3.17.0 or earlier are in scope. Sites that do not have the plugin installed can skip it. The sources do not say which roles or settings are needed to reach the flawed check.
No product ranges from the sources yet.
wp plugin get seriously-simple-podcasting --field=version3.17.0; the sources do not name the exact fixed releaseEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0.
This page as .md · .json · in your agent: get_signal("CVE-2026-112834")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.