Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-23530

WordPress Custom Post Type Lockdown plugin <= 1.11 - CSRF to Privilege Escalation vulnerability

Description

Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through <= 1.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

yonisink Custom Post Type Lockdown

Default version status: unaffected

  • 0 to ≤ 1.11affected

References