WordPress security by component

Custom Post Type Attachment

Plugin description

Custom Post Type Attachment is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 16, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: custom-post-type-attachment

Latest vulnerability

CVE-2024-4546: Custom Post Type Attachment: Cross-site scripting

Custom Post Type Attachment is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedMay 16, 2024

Safe version guidanceSee mitigation notes

		Safe version
May 16, 2024	CVE-2024-4546 Custom Post Type Attachment: Cross-site scripting Custom Post Type Attachment is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending