Castos vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-112834Seriously Simple Podcasting (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-10-20CVE Database V5CVE-2026-112834 CVE-2026-112834 is a missing authorization vulnerability in Castos Seriously Simple Podcasting versions prior to 3.17.1. This flaw allows unauthorized access due to incorrectly configured access control security levels. The vulnerability has a medium severity with a CVSS score of 5.3 and impacts confidentiality but not integrity or availability. A fix is available in version 3.17.1. EPSS 0.3%Vulnerability Castos	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.2%	CVE-2026-112833Seriously Simple Podcasting (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-10-20CVE Database V5CVE-2026-112833 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through 3.17.0. EPSS 0.2%Vulnerability Castos	CVE Database V5	2026-10-20

Page 1 of 1