Access Control Flaw in Seriously Simple Podcasting by WordPress

CVE-2025-66060

What is CVE-2025-66060?

A missing authorization vulnerability has been identified in the Seriously Simple Podcasting plugin developed by WordPress. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially enabling unauthorized access to sensitive functionalities. The vulnerability affects all versions of the plugin up to and including 3.13.0, necessitating immediate attention to ensure proper access controls are configured.

References