← Database

CVE-2026-25470

CRITICAL CVSS: 10.0 Published: 2026-06-17 Modified: 2026-06-17

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusion. This issue affects ACPT (Pro) - Custom Post Types Plugin for WordPress: from n/a through 2.0.47.

Affected Platforms

Unknown

Weakness Type

CWE-94

References