CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Retrieve Embedded Sensitive Data.This issue affects Seriously Simple Podcasting: from n/a through <= 3.13.0.
Explanation of Vulnerability in Simple Terms
Seriously Simple Podcasting versions 3.13.0 and earlier expose sensitive information to unauthenticated attackers over the network. The vulnerability allows reading of non-public data without requiring user interaction or special network conditions. This affects all installations of the plugin up to and including version 3.13.0.
What an attacker can do
Read sensitive non-public information from the podcast plugin without authentication.
Potential impact on your site
Podcast data and configuration details may be exposed to anyone on the internet.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
