This is why you update: ACF Extended Plugin Vulnerability
A critical-severity security vulnerability has been discovered in the ACF Extended plugin for WordPress, potentially allowing unauthenticated attackers to gain full administrator privileges on vulnerable …