CVE-2026-32566

CriticalCVSS 9.8

Published: 27/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.45%

37th percentile - higher than 37% of all known CVEs

Summary

The ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63 contain an unauthenticated privilege escalation vulnerability. An attacker can gain higher privileges in the system.

Risk Assessment

Risk of unauthorized access to administrative functions and taking over the website.

Recommendation

Update the ACPT (Pro) plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in ACPT (Pro)

CVE-2026-32563Critical
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63.

Original NVD description (English source)

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS