sc0ttkclark vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20262

Newest CVEs

• CVE-2026-76573

  Pods <= 3.3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'not_found' Shortcode Attribute

  sc0ttkclark · Pods – Custom Content Types and Fields

  Medium6.4
• CVE-2026-19598

  Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

  sc0ttkclark · Pods – Custom Content Types and Fields

  Critical9.8
• CVE-2024-3956

  Pods – Custom Content Types and Fields <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pod Form Redirect URL

  sc0ttkclark · Pods – Custom Content Types and Fields

  Medium5.4
• CVE-2023-6999

  Pods - Custom Content Types and Fields - Authenticated (Contributor+) Remote Code Execution

  sc0ttkclark · Pods – Custom Content Types and Fields

  High8.8
• CVE-2023-6965

  Pods - Custom Content Types and Fields - Missing Authorization

  sc0ttkclark · Pods – Custom Content Types and Fields

  Medium4.3
• CVE-2023-6967

  Pods - Custom Content Types and Fields - Authenticated (Contributor+) SQL Injection via Shortcode

  sc0ttkclark · Pods – Custom Content Types and Fields

  High8.8