Advanced Custom Fields (ACF) version 6.8.5 is a security-focused release for both ACF and ACF PRO. Key fixes include: verifying security nonces in ACF PRO's WooCommerce order field save handler to prevent unauthenticated field value updates for HPOS stores; patching a stored XSS vulnerability in the Flexible Content 'Rename Layout' modal; applying a default limit of 1000 user-contributed choices for Checkbox, Radio, and Select fields (customizable via a new filter); and fully escaping special characters in LIKE patterns within wp_options queries. All users are urged to upgrade immediately.
8.1K Impressions2 Comments