CVE-2023-6965 - Pods - Custom Content Types and Fields

Back Back to CVE browser

MEDIUM

Pods - Custom Content Types and Fields - Missing Authorization

Published Apr 9, 2024

4.3

MEDIUM

CVSS 3.1

EPSS 0.55%

Description

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.0.10 (with the exception of 2.7.31.2, 2.8.23.2, 2.9.19.2). This is due to the fact that the plugin allows the use of a file inclusion feature via shortcode. This makes it possible for authenticated attackers, with contributor access or higher, to create pods and users (with default role).

Affected products

Vendor Sc0ttkclark Product Pods – Custom Content Types and Fields Default
unaffected
- Version
  2.8
  Status
  affected
  Constraints
  <2.8.23.2
- Version
  3
  Status
  affected
  Constraints
  <3.0.10.2
- Version
  -
  Status
  affected
  Constraints
  <2.7.31

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sc0ttkclark

Pods – Custom Content Types and Fields

unaffected

Version	Status	Constraints
2.8	affected	<2.8.23.2
3	affected	<3.0.10.2
-	affected	<2.7.31

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (3)

Link	Providers	Tags
https://plugins.trac.wordpress.org/browser/pods/trunk/classes/PodsView.php#L750		Product
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3039486%40pods%2Ftrunk&old=3039467%40pods%2Ftrunk&sfp_email=&sfph_mail=		Product
https://www.wordfence.com/threat-intel/vulnerabilities/id/c5d330cd-ad1f-451e-bf41-39cfeb296cf0?source=cve		Third Party Advisory