CVE-2026-19598

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the podsadmin AJAX router funnels every access check — including the method allowlist, nonce...

CVE-2026-19598

creationtimestamp| type| source ---|---|--- 2026-08-15 18:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt5bgdy5vm23 2026-08-15 19:00:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5ea3j2qc22 2026-08-17 18:00:05+00:00| seen|...