sc0ttkclark
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Pods – Custom Content Types and Fields | 6 | – | Sep 5, 2026 |
Exploited and recent CVEs
- CVE-2026-76573 Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute 0.3%
- CVE-2026-19598 Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router 2.3%
- CVE-2024-3956 Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL 0.4%
- CVE-2023-6999 Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution 1.3%
- CVE-2023-6965 Pods - Custom Content Types and Fields - Missing Authorization 0.6%
- CVE-2023-6967 Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode 0.8%