CVE-2026-74853

Pods WordPress plugin versions before 3.3.9.2 are affected by an arbitrary file read vulnerability in the shortcode display callback . The root cause is that the plugin does not restrict which functions a display callback may resolve to, enabling users with the author role or higher to read arbit...