Getting started with Advanced Custom Fields ACF comes in two versions. The free download from WordPress.org contains most of the basic functionality.

Security researchers warn that the 'Advanced Custom Fields' and 'Advanced Custom Fields Pro' WordPress plugins, with millions of installs, are vulnerable to cross-site scripting attacks (XSS).

Specifically, Advanced Custom Fields — a plug-in making it easier for WordPress users to customize their edit screens — is being taken out of WP Engine’s hands and updated as a new plug-in ...