CVE-2026-32564

The ACPT (Pro) - Custom Post Types Plugin for WordPress versions up to 2.0.63 is vulnerable to a Subscriber-level SQL Injection, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This high-severity vulnerability poses a significant risk to WordPress sites using the affected plugin, particularly those with low-level user roles. WordPress administrators and site owners utilizing this plugin should prioritize immediate updates to mitigate potential exploitation.