CVE-2025-14167

Name of the Vulnerable Software and Affected Versions Remove Post Type Slug versions up to and including 1.0.2

Description The Remove Post Type Slug plugin for WordPress is susceptible to Cross-Site Request Forgery. This is a result of flawed nonce validation, where the logic uses OR (||) instead of AND (&&). This allows an attacker to modify the plugin’s post type slug removal settings through a forged request if they can trick a site administrator into performing an action, such as clicking a link.

Recommendations Update the Remove Post Type Slug plugin to a version later than 1.0.2.