Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Pods – Custom Content Types and Fields — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Pods – Custom Content Types and Fields, with AI-generated Chinese analysis, references, and POCs.

Vendor: Pods Framework Team

CVE IDTitleCVSSSeverityPublished
CVE-2024-3956 Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL CWE-79 5.4 Medium2024-05-10
CVE-2023-6999 Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution CWE-77 8.8 High2024-04-09
CVE-2023-6965 Pods - Custom Content Types and Fields - Missing Authorization CWE-862 4.3 Medium2024-04-09
CVE-2023-6967 Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode CWE-89 8.8 High2024-04-09
CVE-2023-23790 WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 7.1 High2023-05-03
CVE-2021-24339 Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79 5.4 -2021-06-21
CVE-2021-24338 Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79 5.4 -2021-06-21

All 7 known CVE vulnerabilities affecting Pods – Custom Content Types and Fields with full Chinese analysis, references, and POCs where available.