The vulnerability is a missing authorization flaw that allows attackers to bypass correctly configured access control security levels in the WordPress Seriously Simple Podcasting plugin. This flaw can enable unauthorized users to view, edit, or delete podcast data without proper permissions, potentially exposing confidential content or altering media assets. The underlying weakness is identified as improper authorization (CWE‑862).

The flaw affects all installations of the Castos Seriously Simple Podcasting plugin from the earliest available version up to and including 3.17.0. Users running these or earlier versions are exposed regardless of the WordPress core version or site configuration.

The CVSS v3.1 score of 5.3 indicates moderate severity. Exploitation requires that the attacker either be authenticated as a user with any role or target endpoints exposed by the plugin; the attack vector is likely web‑based, leveraging the plugin’s administrative interface. The EPSS score is not provided, and the vulnerability is not listed in CISA’s KEV catalog, suggesting no publicly known active exploitation yet. Nonetheless, the lack of authorization controls means any compromised or privileged account could be abused to manipulate media content.