CSRF Vulnerability in Seriously Simple Podcasting by Craig Hewitt

CVE-2025-66061

What is CVE-2025-66061?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Seriously Simple Podcasting plugin developed by Craig Hewitt. This security issue allows an attacker to create unauthorized actions on behalf of an authenticated user. It affects all versions of Seriously Simple Podcasting up to and including 3.13.0, exposing users to the risk of malicious commands being executed without their consent. It is crucial for users to upgrade to the latest version to mitigate potential threats.

References