A CPT CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL A CPT CVE published 2026-08-24

CVE-2026-32563

A critical vulnerability was found in the ACPT (Pro) - Custom Post Types Plugin for WordPress, affecting versions up to 2.0.63. This vulnerability involves a Subscriber PHP Object Injection, which could allow attackers to execute arbitrary code on the server.