Advisories · Technology
Pods.
Every CVE that names Pods among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Pods < 3.3.9.2 - Author+ Arbitrary File Read via Shortcode Display Callback
- Pods
- Information disclosure
- CVSS 7.2 High
Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback
- Pods
- Code injection
- CVSS 7.1 High
WordPress Pods plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability
- Pods
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Pods < 3.2.8.2 - Admin+ SQL Injection
- Pods
- CVSS 6.1 Medium
Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
- Pods
- CVSS 4.8 Medium
Pods < 3.2.7.1 - Admin+ Stored XSS
- Pods