Medium · 5.9 CVE-2023-32116 EUVD-2023-36384GHSA-rqrp-8f48-953h

WordPress Custom post types Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)

Published Oct 26, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in TotalPress.Org Custom post types, Custom Fields & more plugin <= 4.0.12 versions.

Vendor	Product	Affected	Fixed
TotalPress.org	Custom post types, Custom Fields & more	≤ 4.0.12	—