CVE-2020-13700

creationtimestamp| type| source ---|---|--- 2023-12-24 08:34:09+00:00| seen| https://t.me/arpsyndicate/2162...

CVE-2020-13700

An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/options/ request that reads sensitive information in the wpoptions table, such as the login and pass...

CVE-2020-13700

The CVE-2020-13700 entry concerns the WordPress plugin acf-to-rest-api (3.1.0) or apply latest security patches, per the provided connected documents. If exploitation details are needed, the documents note theoretical access through permalinks manipulation; no in-wild exploit specifics are descri...