4 May

ACF 6.1.6

By Matt Shaw

Advanced Custom Fields version 6.1.6 is now available.

This release contains an important security fix as well as some further fixes for duplicating fields.

👨‍💻 Please find the release notes below. And for the latest ACF news, follow us on Twitter @wp_acf.


  • Security Fix – This release resolves an XSS vulnerability in ACF’s admin pages (Thanks to Rafie Muhammad for the responsible disclosure)
  • Fix – Duplicating fields in a new field group with field setting tabs disabled now behaves correctly

ACF v5 Users

For those users holding off on upgrading to ACF 6, we’ve released ACF 5.12.6 which contains the security fix mentioned above. ACF PRO users can download this back ported release from their account, and ACF Free users can download it from the WordPress plugin directory.

🙌 Thanks to everyone who helped make this release possible.

For questions and help about this release, please contact our support team.

About the Author

For plugin support, please contact our support team directly, as comments aren't actively monitored.