Wpengine

A Code Injection vulnerability was discovered in Advanced Custom Fields PRO due to improper control of code generation. This issue was identified during a planned security audit.

A Path Traversal vulnerability, also known as Improper Limitation of a Pathname to a Restricted Directory, was discovered in Advanced Custom Fields PRO during a planned security audit. This issue allows for PHP Local File Inclusion.