CVE Catalog
CVE-2026-32566
CriticalCVSS 9.8Summary
The ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63 contain an unauthenticated privilege escalation vulnerability. An attacker can gain higher privileges in the system.
Risk Assessment
Risk of unauthorized access to administrative functions and taking over the website.
Recommendation
Update the ACPT (Pro) plugin to the latest version that includes a fix for this vulnerability.
Original NVD description (English source)
Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

