Acpt CVEs and Security Vulnerabilities

CVE-2026-25470

WordPress ACPT (Pro) - Custom Post Types plugin for WordPress plugin < 2.0.52 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions.

CVSS 3.1 · 10 Critical EPSS < 1% KEV · Not listed

Vendors

Acpt Wordpress

Products

Acpt (pro) - Custom Post Types Plugin For Wordpress Wordpress

CVE-2026-32566

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Acpt Wordpress

Products

Acpt (pro) - Custom Post Types Plugin For Wordpress Wordpress

CVE-2026-32564

Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Acpt Wordpress

Products

Acpt (pro) - Custom Post Types Plugin For Wordpress Wordpress

CVE-2026-32563

Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Acpt Wordpress

Products

Acpt (pro) - Custom Post Types Plugin For Wordpress Wordpress