WordPress security by component

ACPT (Pro) - Custom Post Types Plugin for WordPress

Plugin description

ACPT (Pro) - Custom Post Types Plugin for WordPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 17, 2026; the highest CVE/CNA score is 10.

Plugin slug: advanced-custom-post-type

Latest vulnerability

CVE-2026-25470: ACPT (Pro) - Custom Post Types Plugin for WordPress: Code execution

ACPT (Pro) - Custom Post Types Plugin for WordPress is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 2.0.47.

PublishedJun 17, 2026

Known safe version> 2.0.47

		Safe version
Jun 17, 2026	CVE-2026-25470 ACPT (Pro) - Custom Post Types Plugin for WordPress: Code execution ACPT (Pro) - Custom Post Types Plugin for WordPress is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account. The published affected range is n/a through 2.0.47.	> 2.0.47	CVE10.0 NVDPending