Custom Post Types and Custom Fields creator – WCK

Custom Post Types and Custom Fields creator – WCK has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Custom Post Types and Custom Fields creator – WCK has a vendor fix available, so running the current release closes it.

All of these findings were reported by Do Nguyen. Custom Post Types and Custom Fields creator – WCK is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Custom Post Types and Custom Fields creator – WCK vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2022-4442

Custom Post Types and Custom Fields creator <= 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Custom Post Types and Custom Fields creator – WCK banner
Latestv2.3.9

Custom Post Types and Custom Fields creator – WCK

madalin.ungureanu

Author

madalin.ungureanu

4.7(97)
94/100
Last Updated
2026-07-15 (2mo ago)
Active Installs
10,000+
Downloads
569,430
Requires WP
3.1+
Requires PHP
0+
Tested up to
WP 7.0.4
Created
2013-05-01 (14y ago)

WordPress Creation Kit consists of three tools that can help you create and maintain custom post types, custom taxonomies and most importantly, custom fields and metaboxes for your posts, pages or CPT’s. WCK Custom Fields Creator offers an UI for setting up custom meta boxes with custom fields for your posts, pages or custom post types. Uses standard custom fields to store data. You can show custom fields using code or with the Swift Templates module. WCK Custom Post Type Creator facilitates creating custom post types by providing an UI for most of the arguments of register_post_type() function. WCK Taxonomy Creator allows you to easily create and edit custom taxonomies for WordPress without any programming knowledge. It provides an UI for most of the arguments of register_taxonomy() function. Custom Fields Custom fields types: WYSIWYG editor, upload, text, textarea, select, checkbox, radio, number, HTML, time-picker, phone, currency select, color picker, heading Easy to create custom fields for any post type. Support for Repeater Fields and Repeater Groups of custom fields. Drag and Drop to sort the Repeater Fields. Support for all input custom fields: text, textarea, select, checkbox, radio. Image / File upload supported via the WordPress Media Uploader. Possibility to target only certain page-templates, target certain custom post types and even unique ID’s. All data handling is done with Ajax Data is saved as postmeta Custom Post Types and Taxonomy Create and edit Custom Post Types from the Admin UI Advanced Labeling Options Attach built in or custom taxonomies to post types Create and edit Custom Taxonomy from the Admin UI Attach the taxonomy to built in or custom post types WCK PRO The WCK PRO version offers: Swift Templates – Build your front-end templates directly from the WordPress admin UI, without writing any PHP code. Easily display registered custom post types, custom fields and taxonomies in your current theme. Front-end Posting – form builder for content creation and editing Options Page Creator – create option pages for your theme or your plugin More field types: Date-picker, Country Select, User Select, CPT Select Premium Email Support for your project See complete list of PRO features Website http://www.cozmoslabs.com/wck-custom-fields-custom-post-types-plugin/ Announcement Post and Video http://www.cozmoslabs.com/3747-wordpress-creation-kit-a-sparkling-new-custom-field-taxonomy-and-post-type-creator/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C