Pods – Custom Content Types and Fields — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Pods – Custom Content Types and Fields, with AI-generated Chinese analysis, references, and POCs.

Vendor: Pods Framework Team

CVE ID	Title	CVSS	Severity	Published
CVE-2026-76573	Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute CWE-79	6.4	Medium	2026-09-05
CVE-2026-19598	Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router CWE-863	9.8	Critical	2026-08-15
CVE-2024-3956	Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL CWE-79	5.4	Medium	2024-05-10
CVE-2023-6999	Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution CWE-77	8.8	High	2024-04-09
CVE-2023-6965	Pods - Custom Content Types and Fields - Missing Authorization CWE-862	4.3	Medium	2024-04-09
CVE-2023-6967	Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode CWE-89	8.8	High	2024-04-09
CVE-2023-23790	WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352	7.1	High	2023-05-03
CVE-2021-24339	Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79	5.4	-	2021-06-21
CVE-2021-24338	Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79	5.4	-	2021-06-21

All 9 known CVE vulnerabilities affecting Pods – Custom Content Types and Fields with full Chinese analysis, references, and POCs where available.