5.3
Medium
CVE-2026-39505 Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
Description
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Seriously Simple Podcasting: from n/a through <= 3.14.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Seriously Simple Podcasting 3.14 | earliest → 3.14.2 | No fix stated |
Other CVEs of Seriously Simple Podcasting
The 10 CVEs of Seriously Simple Podcasting →
CVE-2026-24952
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt…
6.5
Medium
CVE-2026-24360
Server-Side Request Forgery (SSRF) vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting…
4.4
Medium
CVE-2025-66059
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously…
5.3
Medium
CVE-2025-66060
Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows…
5.3
Medium