Critical WordPress Pods Flaw Lets Unauthenticated Attackers Gain Admin Access

A critical security vulnerability in the Pods WordPress plugin could allow unauthenticated attackers to seize administrator-level control of affected websites. The flaw, tracked as CVE-2026-19598, impacts all Pods versions through 3.3.9 and has received a CVSS score of 9.8, making it critical. Pods is a plugin for building custom content types, fields, and taxonomies, with more than 100,000 active installations. The vulnerability was discovered by security researcher Nhien…