Skip to contentSc0ttkclark Pods – Custom Content Types And Fields vulnerabilities
- sc0ttkclark pods – custom content types and fieldsPods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode AttributeCVE-2026-765736.4 Medium
- sc0ttkclark pods – custom content types and fieldsPods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX RouterCVE-2026-19598Public exploit9.8 Critical
- sc0ttkclark pods – custom content types and fieldsPods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URLCVE-2024-39565.4 Medium
- podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 morePods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code ExecutionCVE-2023-69998.8 High
- podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 morePods - Custom Content Types and Fields - Missing AuthorizationCVE-2023-69654.3 Medium
- podsfoundation pods, sc0ttkclark pods – custom content types and fields +1 morePods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2023-69678.8 High
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 moreWordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-237907.1 High
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 morePods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-243395.4 Medium
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 morePods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-243385.4 Medium