Skip to content
OpenAdvisories

Product · farvehandleren

Custom Post Type

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-13142

    Custom Post Type <= 1.0 - Cross-Site Request Forgery to Custom Post Type Deletion

    The Custom Post Type plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on the custom post type deletion functionality. This makes it possible for unauthenticated…

    farvehandleren Custom Post Type Web / CMS