Custom Post Type Images

Custom Post Type Images has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Custom Post Type Images has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Kévin Mosbahi (Mika). Custom Post Type Images is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.3.2.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Custom Post Type Images vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-58255

Custom Post Type Images <= 0.5 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2025-09-22 00:00	Custom Post Type Images <= 0.5 - Cross-Site Request Forgery Custom Post Type Images <= 0.5	`CVE-2025-58255`	4.3 Medium	Kévin Mosbahi (Mika)	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv0.5

Custom Post Type Images

Author

yonisink

0.0(0)

0/100

Last Updated

2012-01-18 (15y ago)

Active Installs

10+

Downloads

4,148

Requires WP

Requires PHP

Tested up to

WP 3.3.2

Created

2011-12-21 (15y ago)

Custom Post Type Images makes it easy to attach an image to any custom post type, which you can then call as necessary in the archive page for that post type OR in the single itself, depending on how you use the plugin. Think of it as a featured image for your post types, which you can use on overview or other pages.

View on WordPress.org