CVE-2023-6999

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2. This makes it possible for authenticated attackers, with contributor level access ...

CVE-2023-6999

CVE-2023-6999 — Pods (Pods – Custom Content Types and Fields) for WordPress : Remote Code Execution via the shortcode pathway, exploitable by authenticated users with Contributor+ privileges. Affected: all versions up to 3.0.10, with exceptions for 2.7.31.2, 2.8.23.2, and 2.9.19.2. Root cause: vu...

WordPress Pods Plugin <= 3.0.10 is vulnerable to Remote Code Execution (RCE)

Software Pods Type Plugin Vulnerable versions = 3.0.10 Fixed in 3.0.10.2 OWASP Top 10 A1: Injection Classification Remote Code Execution RCE CVE CVE-2023-6999 Patch priority Medium CVSS severity Medium 9.9 Developer Pods Framework PSID 2f35523a6e52 Credits Nex Team Required privilege Contributor...