Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:pods:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductPods (47314f1c-9e16-53a9-9a0f-51bcb6fc2d0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1446 vulnerable 2026-06-08 07:08:36.986472 Pods < 3.2.8.2 - Admin+ SQL Injection
The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Published: 2025-03-23T06:00:04.960Z
Updated: 2025-03-24T18:20:06.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9883 vulnerable 2026-06-08 07:00:28.846224 Pods < 3.2.7.1 - Admin+ Stored XSS
The Pods WordPress plugin before 3.2.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2024-11-05T06:00:08.587Z
Updated: 2024-11-05T15:42:43.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11849 vulnerable 2026-06-08 06:23:50.521189 Pods – Custom Content Types and Fields < 3.2.8.1 - Admin+ Stored XSS
The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Published: 2025-01-06T06:00:07.626Z
Updated: 2025-01-06T13:38:20.972Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.