Advanced Forms Pro for ACF

Versión 1.9.3.8

• Seguridad Fixed a missing authorization check on the form import handler. An unauthenticated request to admin-post.php could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the edit_pages capability and a valid nonce, and rejects malformed uploads.
• Seguridad Form titles and descriptions are now sanitised on output (esc_html() for the title, wp_kses_post() for the description).
• Corregido Fixed a PHP warning ("Trying to access array offset on value of type null") when saving a form.

Versiones anteriores

• 1.9.3.7: 1 nuevo, 1 mejorado
• 1.9.3.6: 1 corregido
• 1.9.3.4: 1 nuevo