CVE-2026-32566

The ACPT (Pro) - Custom Post Types Plugin for WordPress is affected by an unauthenticated privilege escalation vulnerability in versions prior to 2.0.64 . This flaw allows an attacker to create a WordPress administrator account by exploiting two different routes: the REST API and the admin-ajax e...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

EUVD-2026-66991

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564

CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...

EUVD-2026-66990

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-80586

creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq2qwvc25 2026-08-27 16:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-80561

creationtimestamp| type| source ---|---|--- 2026-08-27 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2h65amoc24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-19401

creationtimestamp| type| source ---|---|--- 2026-08-27 08:23:07+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm...

CVE-2026-80551

creationtimestamp| type| source ---|---|--- 2026-08-27 08:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2g2etdac25 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74752

creationtimestamp| type| source ---|---|--- 2026-08-27 08:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ewomzgq24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74746

creationtimestamp| type| source ---|---|--- 2026-08-27 07:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2eesm3jj2e 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

WordPress Slim SEO plugin < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure vulnerability

Contributor+ Arbitrary Post Meta Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Slim SEO versions 4.9.11...

CVE-2026-74737

creationtimestamp| type| source ---|---|--- 2026-08-27 07:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2dsuodje24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-15990

creationtimestamp| type| source ---|---|--- 2026-08-27 04:02:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtzxmxp2jw2o...

CVE-2026-80212

creationtimestamp| type| source ---|---|--- 2026-08-27 02:29:30+00:00| seen| https://bsky.app/profile/hsbt.org/post/3mtzshizd5k2u 2026-08-30 12:00:54+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mucdrzvkb22r...

CVE-2026-76784

creationtimestamp| type| source ---|---|--- 2026-08-27 02:15:28+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtzrohda632e 2026-08-27 16:21:34+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3mu3axdwp7c2e...

SUSE CVE-2026-68525

Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user has access to a resource POST but not GET. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from...