airesvsg
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ACF to REST API | 2 | – | Jan 7, 2026 |
Exploited and recent CVEs
- CVE-2025-12030 ACF to REST API <= 3.3.4 - Insecure Direct Object Reference to Authenticated (Contributor+) ACF Field/Option Modification 0.4%
- CVE-2025-62979 WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability 0.3%