Skip to content
Noroxi

Castos records

15 published records for vendor castos.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
73.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2023-45001
    39Monitor

    WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    castos · seriously simple statsNov 6, 2023

  • CVE-2024-8738
    24Monitor

    Seriously Simple Stats <= 1.6.0 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    castos · seriously simple statsSep 23, 2024

  • CVE-2024-25599
    24Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    castos · seriously simple podcastingMar 28, 2024

  • CVE-2024-9667
    24Monitor

    Seriously Simple Podcasting <= 3.5.0 - Reflected Cross-Site Scripting via add_query_arg Parameter

    MediumCVSS 6.1No exploitEPSS 0%

    castos · seriously simple podcastingNov 5, 2024

  • CVE-2023-45005
    24Monitor

    WordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    castos · seriously simple statsOct 17, 2023

  • CVE-2025-49923
    23Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.11.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.9No exploitEPSS 0%

    castos · seriously simple podcastingOct 22, 2025

  • CVE-2023-6444
    22Monitor

    Seriously Simple Podcasting < 3.0.0 - Unauthenticated Administrator Email Disclosure

    MediumCVSS 5.3Proof of conceptEPSS 2%

    castos · seriously simple podcastingMar 11, 2024

  • CVE-2022-4571
    21Monitor

    Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    castos · seriously simple podcastingJan 16, 2023

  • CVE-2025-66059
    21Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    castos · seriously simple podcastingNov 21, 2025

  • CVE-2025-66060
    21Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    castos · seriously simple podcastingNov 21, 2025

  • CVE-2024-3751
    19Monitor

    Seriously Simple Podcasting < 3.3.0 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    castos · seriously simple podcastingJul 13, 2024

  • CVE-2025-46261
    19Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.9.0 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    castos · seriously simple podcastingApr 24, 2025

  • CVE-2022-40132
    17Monitor

    WordPress Seriously Simple Podcasting plugin <= 2.16.0 - Cross-Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    castos · seriously simple podcastingSep 23, 2022

  • CVE-2025-62882
    17Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    castos · seriously simple podcastingOct 27, 2025

  • CVE-2025-66061
    17Monitor

    WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    castos · seriously simple podcastingNov 21, 2025