Craig Hewitt vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2026-39505Seriously Simple Podcasting (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-04-08CVE Database V5CVE-2026-39505 Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.2. EPSS 0.2%Vulnerability Craig Hewitt	CVE Database V5	2026-04-08
Medium	6.5	EPSS 0.2%	CVE-2026-24952Seriously Simple Podcasting (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-03CVE Database V5CVE-2026-24952 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Stored XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.1. EPSS 0.2%Vulnerability Craig Hewitt	CVE Database V5	2026-02-03
Medium	4.4	EPSS 0.2%	CVE-2026-24360Seriously Simple Podcasting (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.4EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24360 Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Server Side Request Forgery.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.1. EPSS 0.2%Vulnerability Craig Hewitt	CVE Database V5	2026-01-22
Medium	4.3	EPSS 0.1%	CVE-2025-66061Seriously Simple Podcasting (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-11-21CVE Database V5CVE-2025-66061 Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Cross Site Request Forgery.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0. EPSS 0.1%Vulnerability Craig Hewitt CWE-352	CVE Database V5	2025-11-21
Medium	5.3	EPSS 0.3%	CVE-2025-66060Seriously Simple Podcasting (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66060 Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0. EPSS 0.3%Vulnerability Craig Hewitt CWE-862	CVE Database V5	2025-11-21
Medium	5.3	EPSS 0.3%	CVE-2025-66059Seriously Simple Podcasting (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2025-11-21CVE Database V5CVE-2025-66059 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Retrieve Embedded Sensitive Data.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0. EPSS 0.3%Vulnerability Craig Hewitt CWE-497	CVE Database V5	2025-11-21
Medium	4.3	EPSS 0.2%	CVE-2025-62882Seriously Simple Podcasting (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62882 Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0. EPSS 0.2%Vulnerability Craig Hewitt	CVE Database V5	2025-10-27
Medium	5.9	EPSS 0.2%	CVE-2025-49923Seriously Simple Podcasting (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-10-22CVE Database V5CVE-2025-49923 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOM-Based XSS.This issue affects Seriously Simple Podcasting: from n/a through <= 3.11.1. EPSS 0.2%Vulnerability Craig Hewitt	CVE Database V5	2025-10-22
High	7.1	EPSS 0.4%	CVE-2024-25599Seriously Simple Podcasting (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.4%2024-03-28CVE Database V5CVE-2024-25599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting.This issue affects Seriously Simple Podcasting: from n/a through <= 3.0.2. EPSS 0.4%Vulnerability Craig Hewitt	CVE Database V5	2024-03-28

Page 1 of 1