Skip to content
OpenAdvisories

Vendor

airesvsg

2 known vulnerabilities.

Products

ACF to REST API 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-12030 Public exploit

    ACF to REST API <= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification

    The ACF to REST API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.4. This is due to insufficient capability checks in the update_item_permissions_check() method, which only verifies that the c…

    airesvsg ACF to REST API Web / CMS
  • Medium 5.3
    CVE-2025-62979

    WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-rest-api allows Retrieve Embedded Sensitive Data.This issue affects ACF to REST API: from n/a through <= 3.3.4.

    airesvsg ACF to REST API