← Back

Keesiemeijer

keesiemeijer

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Custom Post Type Date Archives
custom_post_type_date_archives
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-1510
1Keesiemeijer
1Custom Post Type Date Archives
Jun 17, 2026
Feb 22, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is due to the software allowing users to execute an action that...Show more
The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.Show less