Description
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| A CPT | ACPT (Pro) - Custom Post Types Plugin for WordPress | ≤ 2.0.63 | — |
Critical · 9.8
CVE-2026-32563
EUVD-2026-65167GHSA-89vc-p8p8-f8q8
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Patchstack