---
title: "Security Alert – WP Rest API plugin for WordPress"
description: "Issue: WP REST API plugin has released a critical security update (version 1.2.1). They are urging everyone to update to this latest version. Status: Update has been released. Who is..."
url: https://www.inmotionhosting.com/support/edu/wordpress/security-alert-wp-rest-api-plugin-for-wordpress/
date: 2015-04-09
modified: 2021-08-16
author: "InMotion Hosting Contributor"
categories: ["Security", "WordPress Hosting", "WordPress Tutorials"]
type: post
lang: en
---

# Security Alert – WP Rest API plugin for WordPress

| Issue: | WP REST API plugin has released a critical security update (version 1.2.1). They are urging everyone to update to this latest version. |
| --- | --- |
| Status: | Update has been released. |
| Who is impacted? | Websites running the [WP REST API Plugin](https://wordpress.org/plugins/json-rest-api/) for WordPress. |

## Why was this update released?

WP REST API plugin version 1.2.1 was released to address “*a serious information disclosure vulnerability, which allowed for unpublished content and post revisions to be retrieved via the REST API.*” Learn more in the full article on [WordPress.org](https://make.wordpress.org/core/2015/04/09/wp-rest-api-critical-security-release/).

## What should I do?

The REST API Team is urgently advising all users of their plugin to [update the WordPress plugin](/support/edu/wordpress/plugins/update-wordpress-plugin/) to the latest version.