|Issue:||WP REST API plugin has released a critical security update (version 1.2.1). They are urging everyone to update to this latest version.|
|Status:||Update has been released.|
|Who is impacted?||Websites running the WP REST API Plugin for WordPress.|
Why was this update released?
WP REST API plugin version 1.2.1 was released to address “a serious information disclosure vulnerability, which allowed for unpublished content and post revisions to be retrieved via the REST API.” Learn more in the full article on WordPress.org.
What should I do?
The REST API Team is urgently advising all users of their plugin to update the WordPress plugin to the latest version.