Pods Security Vulnerabilities and Issues — Pods CVE List

Lucene search

Pods FoundationPods

4 matches found

CVE•added 2025/03/23 6:15 a.m.•53 views

CVE-2025-1446

The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

9.8CVSS7.8AI score0.00045EPSS

CVE•added 2025/01/06 6:15 a.m.•42 views

CVE-2024-11849

The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

6.1CVSS5.4AI score0.00033EPSS

CVE•added 2015/01/15 3:59 p.m.•36 views

CVE-2014-7957

Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) conduct cross-site scripting (XSS) attacks via the toggled parameter in a toggle action in the pods-comp...

6.8CVSS6.7AI score0.00227EPSS

CVE•added 2024/11/05 6:15 a.m.•32 views

CVE-2024-9883

The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

4.8CVSS4.9AI score0.00092EPSS