ACPT (Pro) - Custom Post Types Plugin
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-25470 | Cri | 0.65 | 10.0 | 0.01 | Jun 17, 2026 | Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions. | ||
| CVE-2026-32564 | Hig | 0.55 | 8.5 | 0.00 | Aug 27, 2026 | Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. |
- risk 0.65cvss 10.0epss 0.01
Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions.
- risk 0.55cvss 8.5epss 0.00
Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.