Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: sc0ttkclark Pods – Custom Content Types and Fields 2.7.31, 2.8.23.2, 3.0.10.2 Clear all filters
TI-2023-06398 CVE-2023-6999 · GHSA-cm43-2v3p-vgjx

Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution

Priority MEDIUM 43

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0128 Published 2024-04-09 Fixed in 2.7.31, 2.8.23.2 +1 CWE-77
TI-2023-06367 CVE-2023-6965 · GHSA-4h68-4rgv-j269

Pods - Custom Content Types and Fields - Missing Authorization

Priority LOW 21

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00554 Published 2024-04-09 Fixed in 2.7.31, 2.8.23.2 +1 CWE-862
TI-2023-06369 CVE-2023-6967 · GHSA-33g4-2m49-x49h

Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode

Priority MEDIUM 42

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2) due to insuff…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00821 Published 2024-04-09 Fixed in 2.7.31, 2.8.23.2 +1 CWE-89