Castos

15 CVEs across 4 Castos products. Browse Castos vulnerabilities, severities, and proof-of-concept exploits.

Castos products with known CVEs

ProductCVEs
Seriously Simple Podcasting12
Seriously Simple Stats3
Seriously Simple Stats2
Seriously Simple Podcasting (WordPress Plugin)1
Castos CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66061Medium4.32025-11-21Cross-Site Request Forgery (CSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Cross Site Request Forgery.This…
CVE-2025-66060Medium5.32025-11-21Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Con…
CVE-2025-66059Medium5.32025-11-21Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcastin…
CVE-2025-62882Medium4.32025-10-27Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Con…
CVE-2025-49923Medium5.92025-10-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple…
CVE-2025-46261Medium5.92025-04-24Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple…
CVE-2024-9667Medium6.12024-11-05The Seriously Simple Podcasting plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escapi…
CVE-2024-8738Medium6.12024-09-24The Seriously Simple Stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on…
CVE-2024-3751Medium4.82024-07-13The Seriously Simple Podcasting WordPress plugin before 3.3.0 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-25599High7.12024-03-28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple…
CVE-2023-6444Medium5.32024-03-11The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by default is the admin email address) via an…
CVE-2023-45001High8.52023-11-06Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously Simple Stats allows SQL Injection.This i…
CVE-2023-45005High7.12023-10-17Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Castos Seriously Simple Stats plugin <= 1.5.1 versions.
CVE-2022-4571Medium5.42023-01-16The Seriously Simple Podcasting WordPress plugin before 2.19.1 does not validate and escape some of its shortcode attributes before outputting them back in the…
CVE-2022-40132Medium5.42022-09-23Cross-Site Request Forgery (CSRF) vulnerability in Seriously Simple Podcasting plugin <= 2.16.0 at WordPress, leading to plugin settings change.