Vulnerabilities

TI-2026-25093 CVE-2026-32566 · GHSA-597g-v5f3-3w2v

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

MEDIUM 49

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2026-08-27 No fix listed CWE-266

TI-2026-25091 CVE-2026-32564 · GHSA-9hrm-9f56-944v

LOW 37

Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-08-27 No fix listed CWE-89

TI-2026-25090 CVE-2026-32563 · GHSA-89vc-p8p8-f8q8

MEDIUM 50

Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-08-24 No fix listed CWE-502

TI-2026-20581 CVE-2026-25470 · GHSA-3xc6-wgx8-2ffv

MEDIUM 50

Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00652 Published 2026-06-16 Fixed in 2.0.52 CWE-94