Advanced Custom Fields Pro - WordPress Plugins v6.3.12

Decryption key:

To view the content, you need to Sign In or Register.

• Fix - ACF Blocks in widget areas no longer cause a fatal error when no context is available
• Fix - ACF Blocks with no fields assigned no longer show a gap in the sidebar where the form would render

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• 
  
• Security Fix - ACF now generates different nonces for each AJAX-enabled field, preventing subscribers or front-end form users from querying other field results
• Security Fix - ACF now correctly verifies permissions for certain editor only actions, preventing subscribers performing those actions
• Security Fix - Deprecated a legacy private internal field type (output) to prevent it being able...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Enhancement - All dashicons are now available to the icon picker field type
• Fix - The True/False field now correctly shows it’s description message beside the switch when using the Stylized UI setting
• Fix - Conditional logic values now correctly load options when loaded over AJAX
• Fix - ACF PRO will no longer trigger license validation calls when loading a front-end page
• i18n - Fixed an...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Security Fix - The ACF shortcode now prevents access to fields from different private posts by default. View the release notes for more information
• Fix - Users without the edit_posts capability but with custom capabilities for a editing a custom post type, can now correctly load field groups loaded via conditional location rules...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Fix - The ACF Shortcode now correctly outputs a comma separated list of values for arrays
• Fix - ACF Blocks rendered in auto mode now correctly re-render their previews after editing fields
• Fix - ACF Block validation no longer raises required validation messages if HTML will automatically select the first value when rendered
• Fix - ACF Block validation no longer raises required validation...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Security - Newly added fields now have to be explicitly set to allow access in the content editor (when using the ACF shortcode or Block Bindings) to increase the security around field permissions. See the release notes for more details
• Security Fix - Field labels are now correctly escaped when rendered in...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Security - ACF Free now uses its own update mechanism from WP Engine servers

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Security - ACF defined Post Type and Taxonomy metabox callbacks no longer have access to $_POST data. (Thanks to the Automattic Security Team for the disclosure)

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

= v6.3.9 = Release Date 15th October 2024
* Security - Editing an ACF Field in the Field Group editor can no longer execute a stored XSS vulnerability. Thanks to Duc Luong Tran (janlele91) from Viettel Cyber Security for the responsible disclosure
* Security - Post Type and Taxonomy metabox callbacks no longer have access to any superglobal values, hardening the original fix from 6.3.8 further
* Fix -...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Security - Setting a metabox callback for custom post types and taxonomies now requires being an admin, or super admin for multisite installs
• Security - Field specific ACF nonces are now prefixed, resolving an issue where third party nonces could be treated as valid for AJAX calls
• Enhancement - A new “Close and Add Field” option is now available when editing a field group, inserting a new field...

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

• Enhancement - Field Group keys are now copyable on click
• Fix - Repeater tables with fields hidden by conditional logic now render correctly
• Fix - ACF Blocks now behave correctly in React StrictMode
• Fix - Edit mode is no longer available to ACF Blocks with an WordPress Block API version of 3 as field editing is not supported in the iframe

Click to expand...

Decryption key:

To view the content, you need to Sign In or Register.

= 6.3.12 =
*Release Date 21st January 2025*

* Enhancement - Error messages that occur when field validation fails due an insufficient security nonce now have additional context
* Fix - Duplicated ACF blocks no longer lose their field values after the initial save when block preloading is enabled
* Fix - ACF Blocks containing complex field types now behave correctly when React StrictMode is enabled

Click to expand...