WordPress plugin
WP Custom Admin Interface security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium6
- Low0
All WP Custom Admin Interface vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤7.42Update to 7.43 | CVE-2026-32521 | |
| Medium4.3 | Missing Authorization ≤7.41Update to 7.42 | CVE-2026-25011 | |
| Medium4.3 | Missing Authorization ≤7.40Update to 7.41 | CVE-2025-63038 | |
| Medium4.3 | Missing Authorization via wpcai_pro_notice_disable ≤7.31Update to 7.32 | CVE-2023-47763 | |
| Medium4.3 | Cross-Site Request Forgery to Transients Deletion <7.33Update to 7.33 | — | |
| Medium4.3 | Missing Authorization to Transients Deletion <7.33Update to 7.33 | CVE-2023-44988 | |
| High7.2 | Authenticated (Administrator+) PHP Object Injection ≤7.28Update to 7.29 | CVE-2022-4043 |
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤7.42Update to 7.43
- Medium4.3Missing Authorization
≤7.41Update to 7.42
- Medium4.3Missing Authorization
≤7.40Update to 7.41
- Medium4.3Missing Authorization via wpcai_pro_notice_disable
≤7.31Update to 7.32
- Medium4.3Cross-Site Request Forgery to Transients Deletion
<7.33Update to 7.33
- Medium4.3Missing Authorization to Transients Deletion
<7.33Update to 7.33
- High7.2Authenticated (Administrator+) PHP Object Injection
≤7.28Update to 7.29
WP Custom Admin Interface: common questions
Does WP Custom Admin Interface have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in WP Custom Admin Interface: 1 high, 6 medium. None are known to affect version null.
How do I check which version of WP Custom Admin Interface I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Custom Admin Interface vulnerability?
CVE-2026-32521, published Mar 20, 2026: WP Custom Admin Interface <= 7.42 - Authenticated (Subscriber+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any WP Custom Admin Interface vulnerability listed in CISA KEV?
No. None of the known WP Custom Admin Interface vulnerabilities is currently listed in the CISA KEV catalog.