Skip to content

6.8.6

Choose a tag to compare

View all tags
@cbravobernal cbravobernal released this 27 May 20:28
6.8.6
c717730
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Date 27th May 2026

Security

  • Hardened authorization on the oEmbed field's AJAX search endpoint. The endpoint now requires an authenticated user with content-authoring capability; the legacy unauthenticated entry point is deprecated and will be removed in a future release.
  • Hardened front-end acf_form() submission processing so the post_title and post_content form options are respected on save, and the save pipeline only accepts values for fields the rendered form exposed. A new acf/form/allowed_field_keys filter is available for sites that legitimately extend a form at runtime.
Assets 2
Loading