Plugin icon

Custom Post Type UI

custom-post-type-ui

Vulnerabilities:

4

Last Updated:

December 5, 2025

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2025-12-12
Title
Custom Post Type UI < 1.18.2 - Admin+ Stored XSS via 'label' Import Parameter
Fixed in
Fixed in 1.18.2
CVSS
3.5 (low)
Published
2025-12-03
Title
Custom Post Type UI < 1.18.1 - Unauthenticated Custom Post Type Modification
Fixed in
Fixed in 1.18.1
CVSS
3.7 (low)
Published
2023-04-03
Title
Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF
Fixed in
Fixed in 1.13.5
CVSS
3.1 (low)
Published
2020-03-17
Title
Custom Post Type UI < 1.7.4 - CSRF to Stored XSS
Fixed in
Fixed in 1.7.4
CVSS
n/a