CVE Catalog

CVE-2026-32566

CriticalCVSS 9.8
Published: Translated: NVD NIST

Summary

The ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63 contain an unauthenticated privilege escalation vulnerability. An attacker can gain higher privileges in the system.

Risk Assessment

Risk of unauthorized access to administrative functions and taking over the website.

Recommendation

Update the ACPT (Pro) plugin to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS