WordPress security by component

Custom Post Type Images

Plugin description

Custom Post Type Images is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 22, 2025; the highest CVE/CNA score is 9.6.

Plugin slug: custom-post-types-image

Latest vulnerability

CVE-2025-58255: Custom Post Type Images: Code execution

Custom Post Type Images is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedSep 22, 2025

Safe version guidanceSee mitigation notes

		Safe version
Sep 22, 2025	CVE-2025-58255 Custom Post Type Images: Code execution Custom Post Type Images is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE9.6 NVDPending