CVE-2026-32566

The ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63 is vulnerable to unauthenticated privilege escalation, allowing attackers to gain elevated permissions without authentication. This critical flaw poses a significant risk to WordPress sites using the affected plugin, potentially leading to unauthorized access and control over site content. WordPress administrators and website owners utilizing this plugin should prioritize immediate updates to mitigate the risk.