CVE-2025-41395

Mattermost Playbooks vulnerability CVE-2025-41395 is supported by OSV GO-2025-3642, which documents the same issue: Mattermost’s Playbooks RetrospectivePost props are not properly validated, enabling a crafted post to trigger DoS for all users. Affected are Mattermost releases with the Playbooks ...

PT-2025-17786 · WordPress · Wp Custom Post Popup

Name of the Vulnerable Software and Affected Versions: WP Custom Post Popup versions 1.0.1 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attacker can...

WordPress plugin WP Custom Post Popup 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-17702 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.11.x through 9.11.10 Mattermost versions 10.4.x through 10.4.2 Mattermost versions 10.5.x through 10.5.0 Description: The issue arises from the failure to properly validate the props used by the RetrospectivePost custom...

CVE-2025-30616

CVE-2025-30616 is a reflected XSS vulnerability in the Latest Custom Post Type Updates plugin for WordPress (NotFound Latest Custom Post Type Updates). Affected versions are from n/a through 1.3.0. The issue arises from improper neutralization of input during web page generation, enabling an atta...

PT-2025-14705 · Unknown · Custom Post Type Updates

Name of the Vulnerable Software and Affected Versions: Latest Custom Post Type Updates versions 1.3.0 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an...

WordPress custom-post-edit plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin custom-post-edit versions = 1.0.4...

CVE-2025-1510

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it...

CVE-2025-1510 Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running doshortcode. This makes it...

CVE-2025-1510

CVE-2025-1510 affects the Custom Post Type Date Archives plugin for WordPress (

WordPress plugin Custom Post Type Date Archives 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection vulnerability exis...

PT-2025-7518 · WordPress · Custom Post Type Date Archives

Name of the Vulnerable Software and Affected Versions: The Custom Post Type Date Archives plugin for WordPress versions up to, and including, 2.7.1 Description: The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution. This issue arises because the...

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

CVE-2025-25139

Cross-Site Request Forgery CSRF vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed wp-custom-post-rss-feed allows Stored XSS.This issue affects WP Custom Post RSS Feed: from n/a through = 1.0.0...

CVE-2025-25139

CVE-2025-25139 concerns the WordPress plugin “WP Custom Post RSS Feed” (versions

WordPress plugin WP Custom Post RSS Feed 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

PT-2025-5949 · WordPress · Wp Custom Post Rss Feed

Name of the Vulnerable Software and Affected Versions: WP Custom Post RSS Feed versions 1.0.0 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in WP Custom Post RSS Feed. Recommendations: For WP Custom Post RSS Feed versions 1.0.0 and...

CVE-2025-23566

Cross-Site Request Forgery CSRF vulnerability in syedamirhussain91 Custom Post custom-post-type-gui allows Stored XSS.This issue affects Custom Post: from n/a through = 1.0...

CVE-2024-27196

Cross Site Scripting XSS vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue affects postMash – custom post order: from n/a through 1.2.0...

CVE-2024-53769

Cross-Site Request Forgery CSRF vulnerability in lriaudel Custom Post Type to Map Store cpt-to-map-store allows Stored XSS.This issue affects Custom Post Type to Map Store: from n/a through = 1.1.0...