CVE-2025-23530

Published Jan 16, 2025

Last updated 2 months ago

CVSS high 8.8

Overview

Description
Cross-Site Request Forgery (CSRF) vulnerability in yonisink Custom Post Type Lockdown custom-post-type-lockdown allows Privilege Escalation.This issue affects Custom Post Type Lockdown: from n/a through <= 1.11.
Source
audit@patchstack.com
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.8
Impact score
5.9
Exploitability score
2.8
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

audit@patchstack.com
CWE-352

Social media

Hype score
Not currently trending

  1. [CVE-2025-23530: HIGH] Critical CSRF vulnerability in Yonatan Reinberg's Custom Post Type Lockdown plugin allows Privilege Escalation. Update to version 1.11 to secure your site against this issue.#cybersecurity,#vulnerability https://t.co/ZK67nBdToh https://t.co/4R74ECzyp4

    @CveFindCom

    16 Jan 2025

    52 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.