Vulnerabilities / WCK
WCK vulnerabilities
Advisories WPSec published for Custom Post Types and Custom Fields creator – WCK. Other sources may list more. Its attack surface: WCK on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2388 | WCK <= 2.3.9 - Reflected Cross-Site Scripting via Upload Field | Medium 6.1 | 2.4.0 |
License: CC BY 4.0