Comment by tone

No one should risk an unknown entity taking illegal control of a key plugin on their site. I can't imagine anyone wanting WP.org to weaponize more plugins on their site.

Update ACF and stay secure against this latest threat. https://www.advancedcustomfields.com/blog/installing-and-upg...