[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6ugC-HjmDKz3kX_VCkwV2ttP2z1DEZk3U4q5teDrcdE":3,"$fo22nzS5sE9QvNh9szquCtcVI9lFMv9rAquxAEybcF0g":193,"$fo61cqYHVzE9uIowFKdUqLykoyef7-11oO7SoNUi0G38":198},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":122,"fingerprints":160},"infospica-headless-api","Infospica Headless API","1.0.0","Infospica","https:\u002F\u002Fprofiles.wordpress.org\u002Ficssubscriptions\u002F","\u003Cp>Infospica Headless API transforms WordPress into a secure and flexible headless CMS by providing a custom REST API namespace with full CRUD capabilities.\u003C\u002Fp>\n\u003Cp>Instead of modifying the default WordPress REST API, this plugin creates an isolated and configurable API layer designed specifically for secure and scalable headless architectures.\u003C\u002Fp>\n\u003Ch3>Ideal for\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Headless WordPress (Next.js, Nuxt, React, Vue, Angular)\u003C\u002Fli>\n\u003Cli>Mobile applications\u003C\u002Fli>\n\u003Cli>SaaS platforms\u003C\u002Fli>\n\u003Cli>Custom frontend integrations\u003C\u002Fli>\n\u003Cli>API-driven architectures\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Custom API namespace with version control\u003C\u002Fli>\n\u003Cli>Full CRUD endpoints (GET, POST, PUT, PATCH, DELETE)\u003C\u002Fli>\n\u003Cli>Supports:\n\u003Cul>\n\u003Cli>Pages\u003C\u002Fli>\n\u003Cli>Posts\u003C\u002Fli>\n\u003Cli>Custom Post Types\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Optional ACF field support (if ACF is active)\u003C\u002Fli>\n\u003Cli>Authentication-aware read and write access\u003C\u002Fli>\n\u003Cli>Capability-based write protection\u003C\u002Fli>\n\u003Cli>Built-in pagination support (\u003Ccode>?page\u003C\u002Fcode> and \u003Ccode>?per_page\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>Clean and intuitive admin settings UI\u003C\u002Fli>\n\u003Cli>Clean uninstall (removes plugin data and settings)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Security Highlights\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>All API endpoints require authentication\u003C\u002Fli>\n\u003Cli>Write operations require appropriate WordPress capabilities\u003C\u002Fli>\n\u003Cli>CSRF protection enforced for cookie-based authentication (nonce validation)\u003C\u002Fli>\n\u003Cli>Sensitive user data (such as email addresses) is not exposed\u003C\u002Fli>\n\u003Cli>WooCommerce core pages are automatically excluded from API responses\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Authentication\u003C\u002Fh3>\n\u003Cp>All endpoints require authentication.\u003C\u002Fp>\n\u003Cp>Supported authentication methods:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress login cookies (browser\u002Fadmin usage)\n\u003Cul>\n\u003Cli>Write requests require \u003Ccode>X-WP-Nonce\u003C\u002Fcode> header or \u003Ccode>_wpnonce\u003C\u002Fcode> parameter\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Application Passwords (recommended for external applications)\u003C\u002Fli>\n\u003Cli>Any authentication method that properly sets the current user context\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Write operations are additionally restricted by WordPress capabilities (e.g., \u003Ccode>edit_posts\u003C\u002Fcode>, \u003Ccode>delete_posts\u003C\u002Fcode>).\u003C\u002Fp>\n\u003Ch3>Available Endpoints\u003C\u002Fh3>\n\u003Cp>Base structure:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002F{namespace}\u002F{version}\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fmy-api\u002Fv1\u002F\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>Status\u003C\u002Fh4>\n\u003Cp>GET \u003Ccode>\u002Fstatus\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch4>Pages\u003C\u002Fh4>\n\u003Cp>GET \u003Ccode>\u002Fpages\u003C\u002Fcode>\u003Cbr \u002F>\nGET \u003Ccode>\u002Fpages\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPOST \u003Ccode>\u002Fpages\u003C\u002Fcode>\u003Cbr \u002F>\nPUT \u003Ccode>\u002Fpages\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPATCH \u003Ccode>\u002Fpages\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nDELETE \u003Ccode>\u002Fpages\u002F{id}\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch4>Posts\u003C\u002Fh4>\n\u003Cp>GET \u003Ccode>\u002Fposts\u003C\u002Fcode>\u003Cbr \u002F>\nGET \u003Ccode>\u002Fposts\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPOST \u003Ccode>\u002Fposts\u003C\u002Fcode>\u003Cbr \u002F>\nPUT \u003Ccode>\u002Fposts\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPATCH \u003Ccode>\u002Fposts\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nDELETE \u003Ccode>\u002Fposts\u002F{id}\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch4>Custom Post Types\u003C\u002Fh4>\n\u003Cp>GET \u003Ccode>\u002F{post-type}\u003C\u002Fcode>\u003Cbr \u002F>\nGET \u003Ccode>\u002F{post-type}\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPOST \u003Ccode>\u002F{post-type}\u003C\u002Fcode>\u003Cbr \u002F>\nPUT \u003Ccode>\u002F{post-type}\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nPATCH \u003Ccode>\u002F{post-type}\u002F{id}\u003C\u002Fcode>\u003Cbr \u002F>\nDELETE \u003Ccode>\u002F{post-type}\u002F{id}\u003C\u002Fcode>\u003C\u002Fp>\n\u003Ch3>Pagination\u003C\u002Fh3>\n\u003Cp>All list endpoints support:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>?page=1  \n&per_page=10 (maximum 50)\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fmy-api\u002Fv1\u002Fposts?page=2&per_page=5\u003Ch3>License\u003C\u002Fh3>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>This plugin is licensed under GPLv2 or later.\u003C\u002Fp>\n","Transform WordPress into a secure headless CMS with a custom REST API, full CRUD support, CPT integration, and ACF compatibility.",0,105,"2026-03-24T12:45:00.000Z","6.9.4","6.0","7.4",[18,19,20,21,22],"acf","custom-api","headless","headless-cms","rest-api","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Finfospica-headless-api.1.0.0.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"icssubscriptions",1,30,94,"2026-05-19T22:13:51.037Z",[37,53,70,91,107],{"slug":38,"name":39,"version":6,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":11,"downloaded":44,"rating":11,"num_ratings":11,"last_updated":45,"tested_up_to":14,"requires_at_least":46,"requires_php":16,"tags":47,"homepage":51,"download_link":52,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"atlasly-content-manager","Atlasly Content Manager","ashwathama","https:\u002F\u002Fprofiles.wordpress.org\u002Fashwathama\u002F","\u003Cp>Atlasly helps you build schema-driven data models inside WordPress and use them through REST API and GraphQL.\u003C\u002Fp>\n\u003Cp>Use Atlasly when you need:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Structured content types and entries\u003C\u002Fli>\n\u003Cli>API-first workflows for headless WordPress\u003C\u002Fli>\n\u003Cli>Form submission capture and data storage\u003C\u002Fli>\n\u003Cli>Import\u002Fexport for operational workflows\u003C\u002Fli>\n\u003Cli>Relationship fields and flexible schema design\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This free plugin includes:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Content type builder with 20+ field types\u003C\u002Fli>\n\u003Cli>Entry management with CRUD operations\u003C\u002Fli>\n\u003Cli>REST API endpoints for content types and entries\u003C\u002Fli>\n\u003Cli>GraphQL endpoint for querying data\u003C\u002Fli>\n\u003Cli>File uploads through WordPress media library\u003C\u002Fli>\n\u003Cli>Relationship fields between entries\u003C\u002Fli>\n\u003Cli>Import\u002Fexport in CSV, JSON, and XML\u003C\u002Fli>\n\u003Cli>Setup wizard and admin dashboard\u003C\u002Fli>\n\u003Cli>Basic webhook triggers for create\u002Fupdate\u002Fdelete events\u003C\u002Fli>\n\u003C\u002Ful>\n","Schema-driven content types, entries, REST API, GraphQL, and form capture for modern WordPress projects.",245,"2026-03-05T09:28:00.000Z","5.0",[48,49,50,21,22],"custom-fields","form-submissions","graphql","https:\u002F\u002Fgithub.com\u002FchandrakantNagpure\u002Fatlasly","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fatlasly-content-manager.1.0.0.zip",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":11,"downloaded":61,"rating":25,"num_ratings":32,"last_updated":62,"tested_up_to":63,"requires_at_least":64,"requires_php":65,"tags":66,"homepage":23,"download_link":68,"security_score":69,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"ng-wp-endpoints","ng-wp-rest","1.5.0","uiarch","https:\u002F\u002Fprofiles.wordpress.org\u002Fuiarch\u002F","\u003Cp>Easy to use plugin for displaying prettier json data for menus, widgets and sidebars.\u003C\u002Fp>\n\u003Ch3>I’ve got an idea\u002Ffix for the template\u003C\u002Fh3>\n\u003Cp>If you would like to contribute to this template then please fork it and send a pull request. I’ll merge the request if it fits into the goals for the template\u003C\u002Fp>\n","Simple plugin to add rest endpoints to blog for working with a js framework.",1157,"2018-03-26T18:37:00.000Z","4.9.29","4.0","5.6",[67],"rest-api-headless-cms","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fng-wp-endpoints.zip",85,{"slug":71,"name":72,"version":73,"author":74,"author_profile":75,"description":76,"short_description":77,"active_installs":78,"downloaded":79,"rating":80,"num_ratings":81,"last_updated":82,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":83,"homepage":86,"download_link":87,"security_score":88,"vuln_count":89,"unpatched_count":11,"last_vuln_date":90,"fetched_at":27},"wp-graphql","WPGraphQL","2.11.2","Jason Bahl","https:\u002F\u002Fprofiles.wordpress.org\u002Fjasonbahl\u002F","\u003Cp>WPGraphQL is a free, open-source WordPress plugin that provides an extendable GraphQL schema and API for any WordPress site.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Get Started\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install WPGraphQL: \u003Ccode>wp plugin install wp-graphql --activate\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Try it out: \u003Ca href=\"https:\u002F\u002Frepl.wpgraphql.com\" rel=\"nofollow ugc\">Live Demo\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Read the \u003Ca href=\"https:\u002F\u002Fwpgraphql.com\u002Fdocs\u002Fquick-start\" rel=\"nofollow ugc\">Quick Start Guide\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Join the \u003Ca href=\"https:\u002F\u002Fdiscord.gg\u002FAGVBqqyaUY\" rel=\"nofollow ugc\">Community on Discord\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\" rel=\"nofollow ugc\">Star the Repo\u003C\u002Fa>!\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Flexible API\u003C\u002Fstrong>: Query posts, pages, custom post types, taxonomies, users, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Extendable Schema\u003C\u002Fstrong>: Easily add functionality with WPGraphQL’s API, enabling custom integrations.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatible with Modern Frameworks\u003C\u002Fstrong>: Works seamlessly with \u003Ca href=\"https:\u002F\u002Fvercel.com\u002Fguides\u002Fwordpress-with-vercel\" rel=\"nofollow ugc\">Next.js\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fdocs.astro.build\u002Fen\u002Fguides\u002Fcms\u002Fwordpress\u002F\" rel=\"nofollow ugc\">Astro\u003C\u002Fa>, \u003Ca href=\"https:\u002F\u002Fwww.okupter.com\u002Fblog\u002Fheadless-wordpress-graphql-sveltekit\" rel=\"nofollow ugc\">SvelteKit\u003C\u002Fa>, and more.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Optimized Performance\u003C\u002Fstrong>: Fetch exactly the data you need in a single query. Boost performance with \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Ftree\u002Fmain\u002Fplugins\u002Fwp-graphql-smart-cache\" rel=\"nofollow ugc\">WPGraphQL Smart Cache\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>WPGraphQL is becoming a \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fnews\u002F2024\u002F10\u002Fwpgraphql\u002F\" rel=\"ugc\">Canonical Plugin\u003C\u002Fa> on WordPress.org, ensuring long-term support and a growing community of users and contributors.\u003C\u002Fp>\n\u003Ch4>Upgrading\u003C\u002Fh4>\n\u003Cp>It is recommended that anytime you want to update WPGraphQL that you get familiar with what’s changed in the release.\u003C\u002Fp>\n\u003Cp>WPGraphQL publishes \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Freleases\" rel=\"nofollow ugc\">release notes on Github\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>WPGraphQL has been following Semver practices for a few years. We will continue to follow Semver and let version numbers communicate meaning. The summary of Semver versioning is as follows:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>MAJOR\u003C\u002Fem> version when you make incompatible API changes,\u003C\u002Fli>\n\u003Cli>\u003Cem>MINOR\u003C\u002Fem> version when you add functionality in a backwards compatible manner, and\u003C\u002Fli>\n\u003Cli>\u003Cem>PATCH\u003C\u002Fem> version when you make backwards compatible bug fixes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>You can read more about the details of Semver at semver.org\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>WPGraphQL uses \u003Ca href=\"https:\u002F\u002Fappsero.com\" rel=\"nofollow ugc\">Appsero\u003C\u002Fa> SDK to collect some telemetry data upon user’s confirmation. This helps us to troubleshoot problems faster and make product improvements.\u003C\u002Fp>\n\u003Cp>Appsero SDK \u003Cstrong>does not gather any data by default.\u003C\u002Fstrong> The SDK starts gathering basic telemetry data \u003Cstrong>only when a user allows it via the admin notice\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>Learn more about how \u003Ca href=\"https:\u002F\u002Fappsero.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Appsero collects and uses this data\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Learn more about how \u003Ca href=\"https:\u002F\u002Fappsero.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Appsero collects and uses this data\u003C\u002Fa>.\u003C\u002Fp>\n","WPGraphQL adds a flexible and powerful GraphQL API to WordPress, enabling efficient querying and interaction with your site's data.",30000,1430860,98,48,"2026-04-13T18:05:00.000Z",[84,50,20,85,22],"decoupled","react","https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-graphql.2.11.2.zip",80,9,"2026-05-07 00:00:00",{"slug":92,"name":93,"version":94,"author":74,"author_profile":75,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":25,"num_ratings":32,"last_updated":99,"tested_up_to":100,"requires_at_least":101,"requires_php":102,"tags":103,"homepage":23,"download_link":106,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"wpgraphql-acf","WPGraphQL for ACF","2.5.2","\u003Cp>WPGraphQL for Advanced Custom Fields is a free, open-source WordPress plugin that adds ACF Fields and Field Groups to the WPGraphQL Schema.\u003C\u002Fp>\n\u003Ch4>Create ACF Field Groups\u003C\u002Fh4>\n\u003Cp>Create ACF Field Groups and Fields using the ACF User Interface, register them with PHP, or leverage ACF local JSON. Each field group and the fields within it can be configured to “Show in GraphQL.”\u003C\u002Fp>\n\u003Ch4>Query your fields with GraphQL\u003C\u002Fh4>\n\u003Cp>Once your field groups and fields are configured to “Show in GraphQL,” they become available in the GraphQL Schema for querying.\u003C\u002Fp>\n\u003Ch4>Supported Field Types\u003C\u002Fh4>\n\u003Cp>WPGraphQL for ACF provides support for most built-in field types of ACF (free & PRO) and extends support to most field types from ACF Extended (free & PRO).\u003C\u002Fp>\n\u003Ch3>Updating\u003C\u002Fh3>\n\u003Cp>If you are updating from WPGraphQL for ACF v0.6.* or older, check out the \u003Ca href=\"https:\u002F\u002Facf.wpgraphql.com\u002Fupgrade-guide\" rel=\"nofollow ugc\">Upgrade Guide\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>For non-major version updates, automatic updates usually should work smoothly, but we still recommend you back up your site and test on a staging site.\u003C\u002Fp>\n\u003Cp>Before updating WPGraphQL for ACF, review the release notes on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwpgraphql-acf\u002Freleases\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>We follow Semantic Versioning (Semver) for meaningful releases:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>MAJOR\u003C\u002Fem> version for incompatible API changes,\u003C\u002Fli>\n\u003Cli>\u003Cem>MINOR\u003C\u002Fem> version for backwards-compatible functionality additions,\u003C\u002Fli>\n\u003Cli>\u003Cem>PATCH\u003C\u002Fem> version for backwards-compatible bug fixes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Learn more about Semver at \u003Ca href=\"https:\u002F\u002Fsemver.org\" rel=\"nofollow ugc\">semver.org\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Fdiscussions\" rel=\"nofollow ugc\">General Help Requests\u003C\u002Fa>: For general questions and help requests, create a new topic in Github Discussions\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpgraphql.com\u002Fdiscord\" rel=\"nofollow ugc\">Discord Community\u003C\u002Fa>: The WPGraphQL Discord is a great place to communicate in real-time. Ask questions, discuss features, get to know other folks using WPGraphQL.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Fissues\u002Fnew?assignees=&labels=&projects=&template=bug_report.yml\" rel=\"nofollow ugc\">Bug Reports\u003C\u002Fa>: Report a bug in WPGraphQL\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Fissues\u002Fnew?assignees=&labels=&projects=&template=feature_request.yml\" rel=\"nofollow ugc\">Feature Requests\u003C\u002Fa>: Suggest an idea, feature, or enhancement for WPGraphQL.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwp-graphql\u002Fsecurity\u002Fadvisories\u002Fnew\" rel=\"nofollow ugc\">Report a Security Vulnerability\u003C\u002Fa>: Report a security vulnerability.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>FAQs\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Does this work with ACF Extended?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Yes! WPGraphQL for ACF allows you to query for (most) fields created with ACF Extended.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Can I filter and sort queries by ACF Fields using WPGraphQL for ACF?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>At this time WPGraphQL for ACF does not support filtering or sorting queries by ACF Fields. “Meta Queries” are often very expensive to execute, so we currently do not support filtering by ACF fields out of the box, but are exploring options for supporting it without the performance penalty.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>I think I found a bug, where do I report it?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>If you think you found a bug, please open an issue on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwp-graphql\u002Fwpgraphql-acf\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>. The more details you provide in the issue, and the more clear your steps to reproduce are, the higher chances we will be able to help.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Can I use ACF Free or Pro with WPGraphQL for ACF?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Yes! WPGraphQL for ACF works great with ACF Free and Pro. The Pro version of ACF has some additional features, such as Flexible Content Fields, Repeater Fields and Options Pages that are supported by WPGraphQL for ACF.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Do I have to use Faust.js to use WPGraphQL for ACF?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>No! While \u003Ca href=\"https:\u002F\u002Fwww.wpgraphql.com\" rel=\"nofollow ugc\">wpgraphql.com\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Facf.wpgraphql.com\" rel=\"nofollow ugc\">acf.wpgraphql.com\u003C\u002Fa> are built using \u003Ca href=\"https:\u002F\u002Ffaustjs.org\u002F\" rel=\"nofollow ugc\">Faust.js\u003C\u002Fa> and Next.js, you can use WPGraphQL for ACF with any GraphQL client, including Apollo, Relay, Urql, etc.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>I have an ACF Extension that adds a new field type, will it work with WPGraphQL for ACF?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>WPGraphQL for ACF supports the field types that come with ACF (Free and PRO) as well as the field types in ACF Extended (Free and PRO). Support for additional field types can be added by using the “register_graphql_acf_field_type” API.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Do I need WPGraphQL and ACF to be active to use this?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin is a “bridge” plugin that brings functionality of ACF to WPGraphQL. Both WPGraphQL and ACF need to be installed and active in your WordPress installation for this plugin to work.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How much does WPGraphQL for ACF cost?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>WPGraphQL for ACF is a FREE open-source plugin. The development is sponsored by \u003Ca href=\"https:\u002F\u002Fwpengine.com\u002Fatlas\" rel=\"nofollow ugc\">WP Engine Atlas\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Does WPGraphQL for ACF support GraphQL Mutations?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>GraphQL Mutations are not yet supported. We are working on adding support for Mutations in the future. We are waiting for the GraphQL “@oneOf” directive to be merged into the GraphQL spec before we add support for Mutations.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Does this work with Field Groups registered in PHP or JSON?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Yes! You can register ACF Field Groups and Fields using the Admin UI, PHP or JSON. WPGraphQL for ACF will detect the Field Groups and Fields and add them to the GraphQL Schema. If using PHP or JSON, you will need to set the “show_in_graphql” setting to “true” to expose the Field Group and Fields to the GraphQL Schema. There might be other settings that need attention at the field group or field level that might impact the schema or field resolution.\u003C\u002Fp>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>WPGraphQL for Advanced Custom Fields uses \u003Ca href=\"https:\u002F\u002Fappsero.com\" rel=\"nofollow ugc\">Appsero\u003C\u002Fa> SDK to collect telemetry data upon user confirmation, helping us troubleshoot problems and improve the product.\u003C\u002Fp>\n\u003Cp>The Appsero SDK \u003Cstrong>doesn’t collect data by default\u003C\u002Fstrong> and only starts gathering basic telemetry data when a user allows it via the admin notice. No data is collected without user consent.\u003C\u002Fp>\n\u003Cp>Learn more about how \u003Ca href=\"https:\u002F\u002Fappsero.com\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Appsero collects and uses data\u003C\u002Fa>.\u003C\u002Fp>\n","WPGraphQL for ACF seamlessly integrates Advanced Custom Fields with WPGraphQL.",10000,97095,"2026-04-09T21:07:00.000Z","6.5.8","5.9","7.3",[18,104,50,20,105],"api","nextjs","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwpgraphql-acf.2.5.2.zip",{"slug":108,"name":109,"version":110,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":115,"downloaded":116,"rating":11,"num_ratings":11,"last_updated":117,"tested_up_to":14,"requires_at_least":65,"requires_php":16,"tags":118,"homepage":23,"download_link":121,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"babylovegrowth-integration","BabyLoveGrowth Integration","1.0.15","BabyLoveGrowth","https:\u002F\u002Fprofiles.wordpress.org\u002Fmeetcpatel8850\u002F","\u003Cp>BabyLoveGrowth Integration adds a secure REST API endpoint to your WordPress site so BabyLoveGrowth.ai can publish or update posts remotely. It uses an API key you control in WordPress settings, and supports featured images and HTML\u002FMarkdown content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Improved Authorization\u003C\u002Fli>\n\u003Cli>Endpoints: \u003Ccode>GET \u002Fwp-json\u002Fbabylovegrowth\u002Fv1\u002Fping\u003C\u002Fcode>, \u003Ccode>POST \u002Fwp-json\u002Fbabylovegrowth\u002Fv1\u002Fpublish\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Accepts \u003Ccode>title\u003C\u002Fcode>, \u003Ccode>slug\u003C\u002Fcode>, \u003Ccode>content_html\u003C\u002Fcode> or \u003Ccode>content_markdown\u003C\u002Fcode>, optional \u003Ccode>metaDescription\u003C\u002Fcode>, \u003Ccode>heroImageUrl\u003C\u002Fcode>, \u003Ccode>status\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Sets\u002Fupdates posts by slug; supports \u003Ccode>publish\u003C\u002Fcode>, \u003Ccode>draft\u003C\u002Fcode>, \u003Ccode>pending\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n","Secure REST endpoint to publish posts from BabyLoveGrowth.ai backend via API key.",1000,3838,"2026-04-15T16:53:00.000Z",[20,119,22,120],"publishing","webhook","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbabylovegrowth-integration.1.0.15.zip",{"attackSurface":123,"codeSignals":146,"taintFlows":155,"riskAssessment":156,"analyzedAt":159},{"hooks":124,"ajaxHandlers":142,"restRoutes":143,"shortcodes":144,"cronEvents":145,"entryPointCount":11,"unprotectedCount":11},[125,130,134,138],{"type":126,"name":127,"callback":128,"file":129,"line":89},"action","admin_menu","add_menu","includes\u002Fclass-infoha-admin.php",{"type":126,"name":131,"callback":132,"file":129,"line":133},"admin_enqueue_scripts","enqueue_assets",10,{"type":126,"name":135,"callback":136,"file":137,"line":89},"rest_api_init","register_routes","includes\u002Fclass-infoha-rest.php",{"type":126,"name":139,"callback":140,"file":141,"line":133},"admin_init","register_settings","includes\u002Fclass-infoha-settings.php",[],[],[],[],{"dangerousFunctions":147,"sqlUsage":148,"outputEscaping":150,"fileOperations":11,"externalRequests":11,"nonceChecks":32,"capabilityChecks":153,"bundledLibraries":154},[],{"prepared":11,"raw":11,"locations":149},[],{"escaped":151,"rawEcho":11,"locations":152},41,[],3,[],[],{"summary":157,"deductions":158},"Based on the provided static analysis and vulnerability history, the infospica-headless-api plugin v1.0.0 exhibits a very strong security posture.  The absence of any identified entry points in AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential attack surface. Furthermore, the code demonstrates excellent security practices with 100% of SQL queries using prepared statements, all output properly escaped, and the presence of nonce and capability checks. The lack of any dangerous functions, file operations, or external HTTP requests further bolsters its security. The plugin also has no recorded vulnerability history, indicating a lack of past issues and a commitment to secure development.",[],"2026-04-16T14:33:45.682Z",{"wat":161,"direct":170},{"assetPaths":162,"generatorPatterns":165,"scriptPaths":166,"versionParams":167},[163,164],"\u002Fwp-content\u002Fplugins\u002Finfospica-headless-api\u002Fassets\u002Fcss\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Finfospica-headless-api\u002Fassets\u002Fjs\u002Fadmin.js",[],[164],[168,169],"infospica-headless-api\u002Fassets\u002Fcss\u002Fadmin.css?ver=","infospica-headless-api\u002Fassets\u002Fjs\u002Fadmin.js?ver=",{"cssClasses":171,"htmlComments":179,"htmlAttributes":180,"restEndpoints":183,"jsGlobals":190,"shortcodeOutput":192},[172,173,174,175,176,177,178],"he-admin","he-settings-form","he-card","he-individual-card","he-card-header","he-individual-heading","he-card-body",[],[181,182],"data-method","data-endpoint",[184,185,186,187,188,189],"\u002Finfospica-headless-api\u002Fv1\u002Fstatus","\u002Finfospica-headless-api\u002Fv1\u002Fpages","\u002Finfospica-headless-api\u002Fv1\u002Fposts","\u002Finfospica-headless-api\u002Fv1\u002Fpages\u002F\\d+","\u002Finfospica-headless-api\u002Fv1\u002Fposts\u002F\\d+","\u002Finfospica-headless-api\u002Fv1\u002Fcpt\u002F",[191],"infohaRest",[],{"error":194,"url":195,"statusCode":196,"statusMessage":197,"message":197},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Finfospica-headless-api\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":32,"versions":199},[200],{"version":6,"download_url":24,"svn_tag_url":201,"released_at":26,"has_diff":202,"diff_files_changed":203,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":204,"is_current":194},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Finfospica-headless-api\u002Ftags\u002F1.0.0\u002F",false,[],[]]