Skip to content
OpenAdvisories

Vendor

sc0ttkclark

6 known vulnerabilities.

Products

Pods – Custom Content Types and Fields 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-76573

    Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versions up to, and including, 3.3.9.1 due to insufficient input sanitization and output escaping. This mak…

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS
  • Medium 5.4
    CVE-2024-3956

    Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Pod Form widget in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied attrib…

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS
  • Medium 4.3
    CVE-2023-6965

    Pods - Custom Content Types and Fields - Missing Authorization

    The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This is due to the fact that the plugin allows the use of…

    sc0ttkclark Pods – Custom Content Types and Fields Web / CMS