WordPress plugin
Custom Post Type UI security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Custom Post Type UI vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Custom Post Type UI: common questions
Does Custom Post Type UI have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Custom Post Type UI: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Custom Post Type UI I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Custom Post Type UI vulnerability?
CVE-2025-14056, published Dec 12, 2025: Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter. Severity: Medium (CVSS 4.4).
Is any Custom Post Type UI vulnerability listed in CISA KEV?
No. None of the known Custom Post Type UI vulnerabilities is currently listed in the CISA KEV catalog.