WordPress 1 vulnerability

Is the Unauthenticated Privilege Escalation in ACPT - Custom Post Types plugin safe?

Below are the known, publicly disclosed vulnerabilities of the Unauthenticated Privilege Escalation in ACPT - Custom Post Types (WordPress) component. If you use it on your site, check the version and update it before the flaw gets exploited.

Using the Unauthenticated Privilege Escalation in ACPT - Custom Post Types plugin? Check for free whether your site is vulnerable through it, or have us update and secure it.

Known vulnerabilities

Krytyczna · CVSS 9.8 CVE-2026-32566 August 27, 2026

Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types: eskalacja uprawnień

Affects: Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types

Eskalacja uprawnień w komponencie Unauthenticated Privilege Escalation in ACPT (Pro) - Custom Post Types. Ocena zagrożenia: Krytyczna (CVSS 9.8). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

How to check whether this affects you

  • Check the installed version of the Unauthenticated Privilege Escalation in ACPT - Custom Post Types component in the admin panel.
  • Compare it with the fixed version noted in the details of the relevant vulnerability above.
  • If your version is older, update the component to the latest available.
  • If a fix has not been released yet, temporarily disable the vulnerable element and watch your logs.
Do not guess, check

Is this plugin putting your site at risk?

We will run a free audit: we check versions, plugins and configuration, and tell you plainly whether you are safe.

Request a free audit →