Pods (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-04. Vendor: Unknown.

CVEs of Pods

• CVE-2026-74853 - CVSS 6.8 (medium), 2026-09-04: The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to…
• CVE-2026-74851 - CVSS 7.2 (high), 2026-08-26: The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author…
• CVE-2025-1446 - CVSS 9.8 (critical), 2025-03-23: The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection…
• CVE-2024-11849 - CVSS 6.1 (medium), 2025-01-06: The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
• CVE-2024-9883 - CVSS 4.8 (medium), 2024-11-05: The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…