Threats tagged 'ghsa-9hrm-9f56-944v'

CVE-2026-32564 is a high severity SQL Injection vulnerability in the ACPT (Pro) - Custom Post Types Plugin for WordPress affecting versions up to 2.0.63. The flaw allows an attacker with low privileges to execute unauthorized SQL commands due to improper neutralization of special elements in SQL queries. This vulnerability can lead to a partial compromise of data confidentiality and availability. No official patch or remediation guidance is currently available from the vendor.