Skip to content
Sc0ttkclark vulnerabilities
Newest
-
sc0ttkclark pods – custom content types and fields
Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute
CVE-2026-76573
6.4 Medium
-
sc0ttkclark pods – custom content types and fields
Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router
CVE-2026-19598
Public exploit
9.8 Critical
-
sc0ttkclark pods – custom content types and fields
Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL
CVE-2024-3956
5.4 Medium
-
podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
CVE-2023-6999
8.8 High
-
podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more
Pods - Custom Content Types and Fields - Missing Authorization
CVE-2023-6965
4.3 Medium
-
podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 more
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2023-6967
8.8 High
-
pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more
WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-23790
7.1 High
-
pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24339
5.4 Medium
-
pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 more
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2021-24338
5.4 Medium