> ACF plugin bug gives hackers admin on 50,000 WordPress sites
[AUTHOR: Bill Toulas]
[DATE: 20/01/2026 22:12]
[LANGUAGE: EN]
A critical-severity vulnerability in the Advanced Custom Fields: Extended (ACF Extended) plugin for WordPress can be exploited remotely by unauthenticated attackers to obtain administrative permissions. [...]