What’s Vulnerable › Vulnerabilities

CVE-2022-29431: Remove CPT base <= 5.8 - CSRF leads to CPT base deletion

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-20 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-Site Request Forgery (CSRF) vulnerability in KubiQ CPT base plugin <= 5.8 at WordPress allows an attacker to delete the CPT base.

Affected products

• KubiQ Remove CPT base (WordPress plugin): through 5.8

References

• https://patchstack.com/database/vulnerability/remove-cpt-base/wordpress-remove-cpt-base-plugin-5-8-cross-site-request-forgery-csrf-vulnerability-leading-to-cpt-base-deletion
• https://wordpress.org/plugins/remove-cpt-base/#developers
• https://patchstack.com/database/vulnerability/remove-cpt-base/wordpress-remove-cpt-base-plugin-5-8-cross-site-request-forgery-csrf-vulnerability-leading-to-cpt-base-deletion
• https://wordpress.org/plugins/remove-cpt-base/#developers

Get alerted when CVE-2022-29431 or the next vulnerability affects your stack