webdevstudios Custom Post Type UI

• CVE-2025-14056 Medium 4.4 Custom Post Type UI <= 1.18.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'label' Import Parameter 0.3%
• CVE-2025-12826 Medium 4.8 Custom Post Type UI <= 1.18.0 - Missing Authorization to Unauthenticated (Previously Administrator+) Custom Post Type Modification 0.3%