CVE-2026-19598 Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

[
  {
    "vendor": "sc0ttkclark",
    "product": "Pods – Custom Content Types and Fields",
    "versions": [
      {
        "version": "2.8",
        "status": "affected",
        "lessThanOrEqual": "2.8.23.3",
        "versionType": "semver"
      },
      {
        "version": "2.9",
        "status": "affected",
        "lessThanOrEqual": "2.9.19.3",
        "versionType": "semver"
      },
      {
        "version": "3.0",
        "status": "affected",
        "lessThanOrEqual": "3.0.10.3",
        "versionType": "semver"
      },
      {
        "version": "3.1",
        "status": "affected",
        "lessThanOrEqual": "3.1.4.1",
        "versionType": "semver"
      },
      {
        "version": "3.2",
        "status": "affected",
        "lessThanOrEqual": "3.2.8.2",
        "versionType": "semver"
      },
      {
        "version": "3.3",
        "status": "affected",
        "lessThanOrEqual": "3.3.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]