Vulnerabilities and security researches forpost-type-switcher post-type-switcher

Oct 26, 2026

PSC, Research URL: PSC-2026-65714
Home page URL: Security reports for Post Type Switcher
Application: Post Type Switcher
Date: Oct 26, 2026
Research Description: Changing a post type can move existing content between editing workflows, templates, and publication controls. Post Type Switcher version 4.1.1 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65714. The review focused on editing permissions, target post type validation, individual and bulk changes, editor integration, and preservation of existing content.
Affected versions: Min 4.1.1, max 4.1.1.
Status: SAFE & CERTIFIED

Jan 09, 2026

CVE, Research URL: CVE-2025-12524
Home page URL: Security reports for Post Type Switcher
Application: Post Type Switcher
Date: Nov 18, 2025
Research Description: The Post Type Switcher plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.0.0 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to modify the post type of arbitrary posts and pages they do not own, including those created by administrators, which can lead to site disruption, broken navigation, and SEO impact.
Affected versions: max 4.0.1.
Status: vulnerable