vulnerability

WordPress Plugin: seriously-simple-podcasting: CVE-2023-6444: Insertion of Sensitive Information Into Sent Data

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

Published

Feb 17, 2024

Added

May 15, 2025

Modified

May 5, 2026

Description

The Seriously Simple Podcasting plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.25.3 via the source code. This makes it possible for unauthenticated attackers to extract product owner emails, which can be an administrators.

Solution

seriously-simple-podcasting-plugin-cve-2023-6444

References

https://www.cve.org/CVERecord?id=CVE-2023-6444
https://www.wordfence.com/threat-intel/vulnerabilities/id/5268485f-d912-4c2d-a0ad-aabb69f9c98c?source=api-prod
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58681
CVE-2023-6444
https://attackerkb.com/topics/CVE-2023-6444
EUVD-EUVD-2023-58681

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report