ACF to REST API

acf-to-rest-api · plugin

Known security vulnerabilities for ACF to REST API. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

2 with public exploit code · latest Jan 7, 2026

Vulnerabilities

CVE-2020-13700
An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress.
High 7.5
CVE-2025-62979
WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability
Medium 5.3
CVE-2025-12030
ACF to REST API <= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification
Medium 4.3