4.8
Moyenne
CVE-2024-9883 The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high…
Description
The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Produits et versions touchés
Autres CVE de Pods
Les 5 CVE de Pods →
CVE-2026-74853
The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to,…
6.8
Moyenne
CVE-2026-74851
The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked…
7.2
Élevée
CVE-2025-1446
The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement,…
4.1
Moyenne
CVE-2024-11849
The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high…
6.1
Moyenne