Custom Post Type Date Archives

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-1510 Feb 22, 04:15 HIGH This Week

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress RCE Code Injection Custom Post Type Date Archives +1

NVD

CVSS 3.1

7.3

EPSS

0.6%

CVE-2025-1510

EPSS 1% CVSS 7.3

HIGH This Week

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress RCE +3

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy