CVE-2026-32566criticalobserved exploitationCWE-266

WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

50Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 9.8epss 0.4%

from disclosure to weapon

Published on NVDAug 27

VulnCheck+1d

exploitation probability

0.4%top 62% of all CVEs

observed exploitation

yesVulnCheck

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

References