CVE-2026-74851 | Pods Plugin up to 3.3.9 on WordPress Display Callback code injection

August 26, 2026 Yanac

A vulnerability was found in Pods Plugin up to 3.3.9 on WordPress. It has been classified as critical. The affected element is an unknown function of the component Display Callback. The manipulation leads to code injection.

This vulnerability is uniquely identified as CVE-2026-74851. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More