The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owners email address (which by default is the admin email address) via an unauthenticated crafted request.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Seriously_simple_podcasting | Castos | * | 3.0.0 (excluding) |