A vulnerability was found in Custom Post Type UI Plugin up to 1.18.0 on WordPress. It has been classified as problematic. The affected element is the function
cptui_process_post_type. The manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-12826. The attack can be initiated remotely. There is not any exploit available.