WordPress plugin
Add custom page template security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium0
- Low0
All Add custom page template vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Add custom page template: common questions
Does Add custom page template have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Add custom page template: 1 high. At least one is not fixed in the latest version.
How do I check which version of Add custom page template I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Add custom page template vulnerability?
CVE-2025-3491, published Apr 25, 2025: Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution. Severity: High (CVSS 7.2).
Is any Add custom page template vulnerability listed in CISA KEV?
No. None of the known Add custom page template vulnerabilities is currently listed in the CISA KEV catalog.