WordPress security by component

Add custom page template

Plugin description

Add custom page template is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 26, 2025; the highest CVE/CNA score is 7.2.

Plugin slug: add-custom-page-template

Latest vulnerability

CVE-2025-3491: Add custom page template: Code execution

Add custom page template is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedApr 26, 2025

Safe version guidanceSee mitigation notes

		Safe version
Apr 26, 2025	CVE-2025-3491 Add custom page template: Code execution Add custom page template is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE7.2 NVDPending