Security
فارسی
All products

pods

WordPress · Plugin
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pods <= 3.2.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-9883 pods WordPress Medium Fix reported
Pods – Custom Content Types and Fields 3.3 - 3.3.9.1 - Authenticated (Author+) Arbitrary File ReadCVE-2026-74853 pods WordPress Medium Fix reported
Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode AttributeCVE-2026-76573 pods WordPress Medium Fix reported
Pods – Custom Content Types and Fields < 3.3.9.1 - Authenticated (Author+) Remote Code ExecutionCVE-2026-74851 pods WordPress High Fix reported
Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX RouterCVE-2026-19598 pods WordPress Critical Fix reported
Pods – Custom Content Types and Fields <= 3.3.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-54191 pods WordPress High Fix reported
Pods – Custom Content Types and Fields <= 3.2.8.1 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2025-1446 pods WordPress Medium Fix reported
Pods – Custom Content Types and Fields <= 3.2.8 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2024-11849 pods WordPress Medium Fix reported
Several WordPress.org Plugins <= Various Versions - Injected BackdoorCVE-2024-6297 ad-invalid-click-protectorblaze-widget WordPress Critical Fix reported
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code ExecutionCVE-2023-6999 pods WordPress High Fix reported
Pods - Custom Content Types and Fields - Missing AuthorizationCVE-2023-6965 pods WordPress Medium Fix reported
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2023-6967 pods WordPress High Fix reported
Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URLCVE-2024-3956 pods WordPress Medium Fix reported
Pods – Custom Content Types and Fields < 2.5.1.2 - SQL Injection pods WordPress Critical Fix reported
Pods <= 2.9.10.2 - Cross-Site Request ForgeryCVE-2023-23790 pods WordPress High Fix reported
Pods <= 2.7.26 - Authenticated Stored Cross-Site Scripting via Menu Label fieldCVE-2021-24339 pods WordPress Medium Fix reported
Pods 2.4.4.1 - 2.7.26 - Authenticated Stored Cross-Site ScriptingCVE-2021-24338 pods WordPress Medium Fix reported
Pods – Custom Content Types and Fields <= 2.7.28 - Authenticated (Admin+) Cross-Site Scripting pods WordPress Medium Fix reported
Pods <= 2.4.3 - Multiple Cross-Site Request ForgeryCVE-2014-7957 pods WordPress Critical Fix reported
Pods <= 2.4.3 - Cross-Site ScriptingCVE-2014-7956 pods WordPress Medium Fix reported