CVE Database /
CVE-2023-6999
CVE · High
CVE-2023-6999 — Pods - Custom Content Types and Fields [pods] < 3.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-6999
|
Pods - Custom Content Types and Fields [pods] < 3.1 |
Improper Neutralization of Special Elements used in a Command ('Command Injection') |
High
8.8
|
< 3.1
|
3.1 |
2024-03-28 |
—
|
CVE-2023-6999
The Pods plugin for WordPress contains a remote code execution vulnerability that allows attackers to execute arbitrary commands on affected websites, potentially leading to complete site compromise. This flaw was identified by Nex Team and impacts all versions prior to 3.0.10.2. An attacker exploiting this vulnerability could establish backdoor access and gain full administrative control over the compromised website. The issue has been resolved in version 3.0.10.2 and later releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings