Advanced Custom Fields (ACF) 6.8.7 is a security-focused release for both the free and PRO versions. Key fixes include server-side validation for image/gallery fields to accept only image files, protection of ACF Block path attributes from client-supplied overrides, HMAC authentication for encrypted values (removing insecure base64 fallback), context-aware field saving for comment/user/options forms, enforcement of WordPress read permissions on AJAX search queries, and restriction of user email exposure in REST API responses for requesters lacking list_users capability. All users are urged to upgrade immediately.
5.9K Impressions