Sc0ttkclark vulnerabilities
We track 3 vulnerabilities in Sc0ttkclark products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2026.
Latest Sc0ttkclark vulnerabilities
- 9.8 Critical severity
Pods – Custom Content Types and Fields: Incorrect Authorization
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check —
- 8.8 High severity
Pods – Custom Content Types and Fields: Improper Neutralization of Special Elements used in a Command
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Remote Code Exxecution via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This makes it possible for authenticated at
- 8.8 High severity
Pods – Custom Content Types and Fields: Improper Neutralization of Special Elements used in an SQL Command
The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to SQL Injection via shortcode in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2) due to insufficient escaping on the user supplied par