VendorsPods Foundationpodsall versions
Vulnerabilities

Pods Foundation Pods

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2025-1446
Pods < 3.2.8.2 - Admin+ SQL Injection
Published 2025-03-23 · Analyzed
9.8EPSS 0.004
CVE-2023-6999
Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution
Published 2024-04-09 · Modified
8.8EPSS 0.013
CVE-2023-6967
Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode
Published 2024-04-09 · Modified
8.8EPSS 0.008
CVE-2023-23790
WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-05-03 · Modified
8.8EPSS 0.003
CVE-2024-11849
Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
Published 2025-01-06 · Analyzed
6.1EPSS 0.003
CVE-2021-24338
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Published 2021-06-21 · Modified
5.4EPSS 0.008
CVE-2021-24339
Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)
Published 2021-06-21 · Modified
5.4EPSS 0.008
CVE-2024-9883
Pods < 3.2.7.1 - Admin+ Stored XSS
Published 2024-11-05 · Analyzed
4.8EPSS 0.004
CVE-2014-7956
Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter in an edit action in the pods page to wp-admin/admin.php.
Published 2015-01-15 · Modified
4.3EPSS 0.020
CVE-2023-6965
Pods - Custom Content Types and Fields - Missing Authorization
Published 2024-04-09 · Modified
4.3EPSS 0.006