CRITICAL 9.8 CVE-2026-32563 Published 24 Aug 2026

WordPress ACPT Pro Plugin PHP Object Injection

Worried this affects one of your servers?

WordPress plugin ACPT (Pro) - Custom Post Types is affected by a PHP Object Injection vulnerability in versions up to 2.0.63.

This flaw allows attackers to inject malicious PHP code, leading to remote code execution (RCE) and unauthorized access to sensitive data.