CyberSecBulletin

Mauro Cassani vulnerabilities

We track 1 vulnerability in Mauro Cassani products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Mauro Cassani vulnerabilities

  • 8.8 High severity

    ACPT (Premium): Unrestricted Upload of File with Dangerous Type

    CVE-2026-105701Mauro Cassani

    The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the REST API form creation endpoint and unsandboxed Twig environment