Server-Side Request Forgery in Craig Hewitt's Seriously Simple Podcasting Plugin

CVE-2026-24360

What is CVE-2026-24360?

A Server-Side Request Forgery (SSRF) vulnerability exists in the Seriously Simple Podcasting plugin, developed by Craig Hewitt. This security flaw allows an attacker to send unauthorized requests from the server, potentially leading to unauthorized data access or other malicious exploitation. The issue affects versions of the plugin up to and including version 3.14.1, posing significant risks to websites utilizing this plugin. It is crucial for users to update their plugins to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References