CVE-2020-13700
1 advisory.
Packagist/airesvsg/acf-to-rest-api CVE-2020-13700: high 7.5
acf-to-rest-api plugin insecure direct object reference (IDOR) via permalink manipulation
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-r345-x8hr-2r9p
- https://nvd.nist.gov/vuln/detail/CVE-2020-13700
- https://gist.github.com/mariuszpoplwski/4fbaab7f271bea99c733e3f2a4bafbb5
- https://github.com/airesvsg/acf-to-rest-api
- https://wordpress.org/plugins/acf-to-rest-api/#developers
CVE-2020-13700 · published · modified · JSON