Pods – Custom Content Types and Fields, CVE-2025-1446

CVE, Research URL: CVE-2025-1446
Home page URL: Security reports for Pods – Custom Content Types and Fields
Application: Pods – Custom Content Types and Fields
Published on: Mar 23, 2025
Research Description: The Pods WordPress plugin before 3.2.8.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks
Affected versions: Min -, max 3.2.8.2.
Status: vulnerable

Pods &#8211; Custom Content Types and Fields, CVE-2025-1446