sc0ttkclark Pods – Custom Content Types and Fields

• CVE-2026-76573 Medium 6.4 Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute 0.3%
• CVE-2026-19598 Critical 9.8 Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router 2.3%
• CVE-2024-3956 Medium 5.4 Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL 0.4%
• CVE-2023-6999 High 8.8 Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution 1.3%
• CVE-2023-6965 Medium 4.3 Pods - Custom Content Types and Fields - Missing Authorization 0.6%
• CVE-2023-6967 High 8.8 Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode 0.8%