CVE-2025-12826 | Custom Post Type UI Plugin up to 1.18.0 on WordPress cptui_process_post_type authorization

A vulnerability was found in Custom Post Type UI Plugin up to 1.18.0 on WordPress and classified as problematic. Impacted is the function cptui_process_post_type. Executing manipulation can lead to missing authorization.

This vulnerability is registered as CVE-2025-12826. It is possible to launch the attack remotely. No exploit is available.