Vulnerability Bulletins

CVE-2026-25470

   
Affected software WORDPRESS
 
Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion.

This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-25470