Advanced Custom Fields: Extended Plugin is a technology platform tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed January 21, 2026; most recent activity January 21, 2026.
Advanced Custom Fields: Extended Plugin is a WordPress extension that augments the core Advanced Custom Fields functionality with additional fields and configuration options. A critical vulnerability in this plugin has been disclosed, risking roughly 100,000 WordPress sites and underscoring the broad attack surface of the WordPress plugin ecosystem. Exploitation could lead to site compromise or unauthorized access, making timely patching essential for affected deployments.
A critical security vulnerability has been identified in the Advanced Custom Fields: Extended plugin for WordPress, affecting up to 100,000 websites. The flaw allows unauthenticated attackers to gain administrative…