A vulnerability was found in Craig Hewitt Seriously Simple Podcasting Plugin up to 3.14.2 on WordPress. It has been rated as critical. Affected is an unknown function. The manipulation leads to missing authorization.

This vulnerability is traded as CVE-2026-39505. It is possible to initiate the attack remotely. There is no exploit available.