Skip to content
OpenAdvisories

Vendor

sc0ttkclark

6 known vulnerabilities.

Products

Pods – Custom Content Types and Fields 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-6999

    Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This makes it possible for authenticated a…

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS
  • High 8.8
    CVE-2023-6967

    Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2) due to insufficient escaping on the user supplied pa…

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS