Toolset Types – Custom Post Types, Custom Fields and Taxonomies

Toolset Types – Custom Post Types, Custom Fields and Taxonomies has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2023; all 3 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Toolset Types – Custom Post Types, Custom Fields and Taxonomies has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Toolset Types – Custom Post Types, Custom Fields and Taxonomies vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2023-27440

Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2023-03-03 00:00	Types <= 3.4.17 - Authenticated (Administrator+) Arbitrary File Upload Toolset Types <= 3.4.17	`CVE-2023-27440`	7.2 High	Dave Jong	Yes
2015-11-10 00:00	Toolset Types < 1.8.8 - Cross-Site Scripting Toolset Types <= 1.8.7.2	`N/A`	7.2 High	Anonymous	Yes
2013-04-04 00:00	Toolset Types <= 1.2.1.1 - Cross-Site Scripting Toolset Types <= 1.2.1.1	`N/A`	5.3 Medium	Stefan Schurtz	Yes

Showing 1–3 of 3 reports