Skip to content
OpenAdvisories

Vendor

sc0ttkclark

6 known vulnerabilities.

Products

Pods – Custom Content Types and Fields 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-19598 Public exploit Scanner template

    Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check …

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS