Advanced Forms Pro for ACF v1.9.3.8 Plugin
Advanced Forms Pro for ACF is a powerful plugin that seamlessly integrates with Advanced Custom Fields (ACF), enabling you to build robust and extensible front-end forms for your WordPress site. With this plugin, you can create simple or complex forms to manage posts, users, and more, leveraging the full range of field types provided by ACF, including repeaters, date pickers, galleries, and even fields from third-party plugins.
Advanced Forms Pro for ACF empowers you to harness the flexibility and customization capabilities of ACF, allowing you to craft forms tailored to your specific needs. Whether you need to collect data, manage user submissions, or integrate with external services, this plugin provides a comprehensive solution for creating dynamic and interactive front-end forms that enhance the user experience on your WordPress site.
Core Features of Advanced Forms Pro for ACF Plugin
- Build powerful front-end forms using Advanced Custom Fields (ACF)
- Access the full set of field types provided by ACF, including repeaters, date pickers, and galleries
- Integrate with fields from third-party plugins
- Create simple or complex forms for managing posts, users, and more
- Easily connect your ACF Forms to external services
- Customize form layouts and styling
- Implement form validation and submission handling
- Manage form entries and submissions
- Extend functionality with hooks and filters
- Seamless integration with the ACF ecosystem
- User-friendly interface for form building and management
- Comprehensive documentation and support
What’s New (Changelog) in Advanced Forms Pro for ACF v1.9.3.8
= v1.9.3.8 =
* Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads. Thanks to Jakub Herman / Patchstack for the responsible disclosure.
* Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
* Fixed a PHP warning ("Trying to access array offset on value of type null") when saving a form.
Similar Plugins