A vulnerability was found in Custom Post Type UI Plugin up to 1.18.0 on WordPress. It has been classified as problematic. The affected element is the function cptui_process_post_type. The manipulation leads to missing authorization.

This vulnerability is documented as CVE-2025-12826. The attack can be initiated remotely. There is not any exploit available.