WordPress CubeWP plugin <= 1.1.31 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin CubeWP versions = 1.1.31...

WordPress RSS Aggregator by Feedzy plugin < 5.2.6 - Author+ Cross-User Import Job Manipulation and Post Deletion vulnerability

Author+ Cross-User Import Job Manipulation and Post Deletion vulnerability discovered by Farid Narimanov in WordPress Plugin Feedzy versions 5.2.6...

CVE-2026-32564

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566

The ACPT (Pro) - Custom Post Types Plugin for WordPress is affected by an unauthenticated privilege escalation vulnerability in versions prior to 2.0.64 . This flaw allows an attacker to create a WordPress administrator account by exploiting two different routes: the REST API and the admin-ajax e...

EUVD-2026-66991

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32566 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

EUVD-2026-66990

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-32564

CVE-2026-32564 is a Subscriber-level SQL Injection in the ACPT (Pro) – Custom Post Types Plugin for WordPress (versions ≤ 2.0.63 ), discovered by VDsec. The vulnerability allows a low-privilege (Subscriber) authenticated user to inject SQL, resulting in HIGH confidentiality impact with changed sc...

CVE-2026-32564 WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - SQL Injection vulnerability

Subscriber SQL Injection in ACPT Pro - Custom Post Types Plugin for WordPress = 2.0.63 versions...

CVE-2026-80586

creationtimestamp| type| source ---|---|--- 2026-08-27 08:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2hq2qwvc25 2026-08-27 16:23:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-80561

creationtimestamp| type| source ---|---|--- 2026-08-27 08:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2h65amoc24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-19401

creationtimestamp| type| source ---|---|--- 2026-08-27 08:23:07+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3mu2g7t33ysfm...

CVE-2026-80551

creationtimestamp| type| source ---|---|--- 2026-08-27 08:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2g2etdac25 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74752

creationtimestamp| type| source ---|---|--- 2026-08-27 08:00:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2ewomzgq24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...

CVE-2026-74746

creationtimestamp| type| source ---|---|--- 2026-08-27 07:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2eesm3jj2e 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774 2026-10-01 18:00:00+00:00| seen|...

WordPress Slim SEO plugin < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure vulnerability

Contributor+ Arbitrary Post Meta Disclosure vulnerability discovered by Shivamani Vastrala in WordPress Plugin Slim SEO versions 4.9.11...

CVE-2026-74737

creationtimestamp| type| source ---|---|--- 2026-08-27 07:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu2dsuodje24 2026-08-27 16:23:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/117168393907382774...