Podsfoundation Pods vulnerabilities

• podsfoundation pods Pods < 3.2.8.2 - Admin+ SQL Injection CVE-2025-1446 9.8 CriticalMarch 23, 2025
• podsfoundation pods Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS CVE-2024-11849 6.1 MediumJanuary 6, 2025
• podsfoundation pods Pods < 3.2.7.1 - Admin+ Stored XSS CVE-2024-9883 4.8 MediumNovember 5, 2024
• podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution CVE-2023-6999 8.8 HighApril 9, 2024
• podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more Pods - Custom Content Types and Fields - Missing Authorization CVE-2023-6965 4.3 MediumApril 9, 2024
• podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode CVE-2023-6967 8.8 HighApril 9, 2024
• pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23790 7.1 HighMay 3, 2023
• pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24339 5.4 MediumJune 21, 2021
• pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24338 5.4 MediumJune 21, 2021
• podsfoundation pods Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows... CVE-2014-7956 4.3 MediumJanuary 15, 2015