Pods – Custom Content Types and Fields

Güvenlik açıkları

• CVE-2026-19598kimlik doğrulamasız≤ 3.3.9

  Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

  Kritik 9.8

• CVE-2023-23790kimlik doğrulamasız · tıklama gerekir≤ 2.9.10.2

  WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-6999katılımcı+→ 2.7.31

  Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution

  Yüksek 8.8

• CVE-2023-6967katılımcı+→ 2.7.31

  Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode

  Yüksek 8.8

• CVE-2026-54191kimlik doğrulamasız · tıklama gerekir≤ 3.3.8

  WordPress Pods plugin <= 3.3.8 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2014-7957

  Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the

  Orta 6.8

• CVE-2026-76573katılımcı+≤ 3.3.9.1

  Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute

  Orta 6.4

• CVE-2024-3956katılımcı+≤ 3.2.1

  Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL

  Orta 5.4

• CVE-2023-6965katılımcı+→ 2.7.31

  Pods - Custom Content Types and Fields - Missing Authorization

  Orta 4.3