The Advanced Custom Fields plugin is also available in a professional version which includes more fields, more functionality, and more flexibility.
- Version: 6.2.7
- Author: WP Engine
- Last Updated: 2 days ago
- Requires WordPress: 5.8 or higher
- Compatible up to: 6.4.3
- Requires PHP: 7.0 or higher
6.2.7
Release Date 27th February 2024- Security Fix - the_field now escapes potentially unsafe HTML as notified since ACF 6.2.5. For full information, please read the release blog post
- Security Fix - Field and Layout names are now enforced to alphanumeric characters, resolving a potential XSS issue
- Security Fix - The default render template for select2 fields no longer allows HTML to be rendered resolving a potential XSS issue
- Security Enhancement - A acf/shortcode/prevent_access filter is now available to limit what data the ACF shortcode is allowed to access
- Security Enhancement - i18n translated strings are now escaped on output
- Enhancement - ACF now universally uses WordPress file system functions rather than native PHP functions