CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0. This is due to the plugin not verifying that a user has the required capability to perform actions in the "cptui_process_post_type" function. This makes it possible for authenticated attackers, with subscriber level access and above, to add, edit, or delete custom post types in limited situations.
Explanation of Vulnerability in Simple Terms
Custom Post Type UI through version 1.18.0 does not properly check user permissions before allowing certain actions. An attacker without authentication can modify post type settings or data, though the impact is limited to integrity and availability of the affected component. Update to a version newer than 1.18.0.
What an attacker can do
Modify post type settings or data without being logged in.
Potential impact on your site
Unauthorized changes to custom post type configuration or content integrity issues.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
