A vulnerability related to Broken Access Control was found for the ACF Pro plugin.

What Steps Did ClearPG Take?

• We were notified about the issue and checked for any sites that might be affected.
• For our managed hosting customers, we automatically updated the plugin to the latest version after verifying the vulnerability was fixed.

References:

• https://patchstack.com/database/vulnerability/advanced-custom-fields-pro/wordpress-advanced-custom-fields-pro-plugin-6-3-2-contributor-broken-access-control-vulnerability