Input validation vulnerability in Custom Post Type Attachment 3.4.5

The plugin called Custom Post Type Attachment for WordPress has a vulnerability that allows for Stored Cross-Site Scripting. This means that attackers who have contributor-level access or higher can inject harmful website code into pages, which will then be executed whenever someone visits that page. This vulnerability affects all versions of the plugin up to and including 3.4.5.

Detected in:

Custom Post Type Attachment open vulnerable versions: >= * <= 3.4.5

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.