Read the docs

airesvsg

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

airesvsg records in CISA KEV

No airesvsg vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-39127 CVE-2025-62979 · GHSA-75wf-2743-qp5f

WordPress ACF to REST API plugin <= 3.3.4 - Sensitive Data Exposure vulnerability

Priority LOW 30

Insertion of Sensitive Information Into Sent Data vulnerability in airesvsg ACF to REST API acf-to-rest-api allows Retrieve Embedded Sensitive Data.This issue affects ACF to REST API: from n/a through <= 3.3.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00256 Published 2025-10-27 No fix listed CWE-201
TI-2025-11029 CVE-2025-12030 · GHSA-g9gc-23hp-3qj2

Authorization bypass in airesvsg ACF to REST API

Priority LOW 20

The ACF to REST API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.3.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00404 Published 2026-01-07 No fix listed CWE-639
Open these records in search →