WordPress plugin
Simple Podcasting security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium1
- Low1
All Simple Podcasting vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Remote Code Execution ≤1.1.0Update to 1.1.1 | CVE-2022-25860 | |
| High8.8 | Prototype Pollution ≤1.0.3Update to 1.1.0 | CVE-2022-46175 | |
| Critical9.8 | Remote Code Execution ≤4.4.0Update to 4.4.1 | CVE-2022-25912 | |
| Low3.7 | Denial of Service ≤4.2.2Update to 4.3.0 | CVE-2022-25858 | |
| Medium5.3 | Open Redirect ≤1.11.1Update to 2.0.0 | CVE-2022-33987 |
- High8.1Remote Code Execution
≤1.1.0Update to 1.1.1
- High8.8Prototype Pollution
≤1.0.3Update to 1.1.0
- Critical9.8Remote Code Execution
≤4.4.0Update to 4.4.1
- Low3.7Denial of Service
≤4.2.2Update to 4.3.0
- Medium5.3Open Redirect
≤1.11.1Update to 2.0.0
Simple Podcasting: common questions
Does Simple Podcasting have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Simple Podcasting: 1 critical, 2 high, 1 medium, 1 low. None are known to affect version null.
How do I check which version of Simple Podcasting I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple Podcasting vulnerability?
CVE-2022-25860, published Feb 23, 2023: simple-git < 3.16.0 - Remote Code Execution. Severity: High (CVSS 8.1).
Is any Simple Podcasting vulnerability listed in CISA KEV?
No. None of the known Simple Podcasting vulnerabilities is currently listed in the CISA KEV catalog.