Pods vulnerabilities
We track 2 vulnerabilities in Pods products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Pods vulnerabilities
- 7.2 High severity
Pods: Improper Control of Generation of Code
The Pods WordPress plugin before 3.3.9.1 does not correctly compare a display callback against its list of blocked functions, allowing users with the author role and above to execute arbitrary code on the server. Only sites using the restricted display-callbac
- 9.8 Critical severity
Pods: Improper Neutralization of Special Elements used in an SQL Command
The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks