CVE-2026-24952

The Seriously Simple Podcasting plugin for WordPress contains a security flaw that allows malicious users with contributor privileges or higher to insert unauthorized code into the site's content. This vulnerability arises from inadequate validation of input data and insufficient protection against script injection, enabling attackers to embed executable scripts in affected pages. As a result, these scripts will run automatically whenever an unsuspecting user visits the compromised page.

Based on public CVE data (MITRE/NVD).