---
id: "CVE-2026-112834"
kind: "vulnerability"
aliases: ["CVE-2026-112834"]
title: "Seriously Simple Podcasting WordPress plugin: missing authorization check through 3.17.0"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["package", "self-hosted", "seriously-simple-podcasting", "wordpress", "wordpress-plugin"]
not_affected_if: ["plugin-not-installed"]
published_at: "2026-10-20T15:17:14+00:00"
first_seen_at: "2026-10-23T21:57:20+00:00"
updated_at: "2026-10-25T04:24:46+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-112834", "first_seen_at": "2026-10-23T21:57:20+00:00"}]
---

# Seriously Simple Podcasting WordPress plugin: missing authorization check through 3.17.0

The Seriously Simple Podcasting WordPress plugin by Castos has a missing authorization check, so a request can reach functionality its caller should not be allowed to use. The sources say the flaw affects all versions through 3.17.0 and do not describe the exact data or actions exposed.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed plugin version in WordPress admin under Plugins, or with `wp plugin get seriously-simple-podcasting --field=version`
- unknown for anything beyond the version, since the sources do not describe the affected endpoint

## Fix

- Update Seriously Simple Podcasting to a version later than `3.17.0`; the sources do not name the exact fixed release
- unknown for other mitigations

## Timeline

- 2026-10-23T21:57:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-112834

## From the sources

Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_