#ACF

1 month ago

Sign-On Letter: Preserve Federal Research & Evaluation on Children and Families The Data Foundation is coordinating a sign-on letter to HHS Secretary Kennedy urging the Department to halt the restructuring of one of the federal government's most effective evaluation offices.

Sign the letter to protect #OPRE at #ACF. Thanks, @nickhartphd.bsky.social , @clairemkbowen.bsky.social , and @csmarcum.bsky.social . #defendresearch #defenddata #BethesdaDeclaration #HHSstrong

5 4 1 0

Emergency Environmental Health Forum

@eehf.bsky.social

1 month ago

Action Against Hunger (ACF) and partners showcase how WASH interventions influence recovery from severe acute malnutrition and the risk of relapse at EEHF.

Resources:
▶️ YouTube: lnkd.in/eZ6gXW4D
🌐 Website: lnkd.in/eW68GRiq

#eehf #acf #nutrition #wash

0 0 0 0

@coupdegraz7.bsky.social

1 month ago

#auspol #AustralianConservationFoundation #ACF

4 1 0 0

CySecurity News

@cysecuritynews.bsky.social

1 month ago

ACF Plugin Flaw Exposes 50,000 WordPress Sites to Admin Takeover A critical vulnerability in the Advanced Custom Fields: Extended (ACF Extended) WordPress plugin has exposed around 50,000 sites to potential hacker takeovers. Tracked as CVE-2025-14533, this flaw affects versions up to 0.9.2.1 and allows unauthenticated attackers to gain administrator privileges through flawed user creation forms. Discovered by researcher Andrea Bocchetti and reported via Wordfence on December 10, 2025, the issue was swiftly patched in version 0.9.2.2 just four days later. Despite the quick fix, download stats show many sites remain unpatched, leaving them vulnerable to remote exploitation. The vulnerability originates in the plugin's 'Insert User / Update User' form action, where role restrictions are not properly enforced. Attackers can exploit this by submitting crafted requests that assign the 'administrator' role, bypassing any configured limitations in field settings.This privilege escalation requires sites to use forms with a 'role' field mapped to custom fields, a common setup for user registration features. Once successful, hackers achieve full site control, enabling data theft, malware injection, or backdoor installation without needing prior access. ACF Extended, active on over 100,000 WordPress installations, builds on the popular Advanced Custom Fields plugin to offer developers advanced customization tools. Its widespread use amplifies the risk, as roughly half of users have yet to update since the patch release in mid-December 2025. WordPress sites relying on these plugins for dynamic content often overlook such configurations, inadvertently creating attack vectors. This privilege escalation bug allows attackers to arbitrarily assign the 'administrator' role during user registration or updates, bypassing any configured limitations in field settings. Exploitation requires sites using ACF Extended forms with a 'role' field mapped to custom fields, a common setup for advanced user management in custom themes and plugins. Once exploited, hackers gain full control, enabling them to install malicious code, steal data, or pivot to server-level compromises without needing credentials. Threat intelligence from GreyNoise reveals aggressive reconnaissance scanning 706 WordPress plugins, including ACF Extended, by nearly 1,000 IPs across 145 ASNs from late October 2025 to mid-January 2026. While no confirmed exploits of CVE-2025-14533 have surfaced, patterns mirror attacks on vulnerabilities like those in Post SMTP and LiteSpeed Cache, signaling imminent danger.This enumeration boom underscores how attackers probe for unpatched flaws before launching mass campaigns. Site owners must urgently update to ACF Extended 0.9.2.2 or later via the WordPress dashboard and audit forms for role mappings.Additional steps include disabling public registration, reviewing user accounts for anomalies, and deploying firewalls like Wordfence for real-time blocking. In WordPress's vast ecosystem, proactive patching remains the frontline defense against such admin takeovers, preventing potential site-wide devastation.

ACF Plugin Flaw Exposes 50,000 WordPress Sites to Admin Takeover #ACF #AdministrativeRights #PluginFlaw

0 0 0 0

Keith

@keithdonegan.com

1 month ago

ACF | React-Powered Custom WordPress Theme Tutorial Create powerful WordPress themes using React. Our tutorial shows developers how to build interactive, responsive frontends for WordPress sites.

#ACF are killing it these days with content marketing.

www.advancedcustomfields.com/blog/wordpre...

0 0 0 0

GLOBAL Visibility aéPiot - by aePiot.ro

@globalvisibility.bsky.social

1 month ago

MultiSearch Tag Explorer MultiSearch Tag Explorer - Explore tags and search results by aéPiot

#IDOLA #CILIK #MUSIM 3
allgraph.ro/advanced-sea...
#ACF #FIORENTINA
multi-search-tag-explorer.allgraph.ro/advanced-sea...
#PPI #BERLIN #BRANDENBURG
aepiot.com/advanced-sea...
aepiot.ro

0 0 0 0

2rZiKKbOU3nTafniR2qMMSE0gwZ

@2rzikkbou3ntafnir2qmmse0gwz.activitypub.awakari.com.ap.brid.gy

1 month ago

Critical Vulnerability in Advanced Custom Fields: Extended Plugin Puts 100,000 WordPress Sites at Risk A critical security flaw has been discovered in a widely used ACF add-on plugin for WordPress,...

#Firewall #Daily #Cyber #News #Vulnerabilities #ACF […]

[Original post on thecyberexpress.com]

0 0 0 0

The New Oil

@thenewoil.org

1 month ago

ACF plugin bug gives hackers admin on 50,000 WordPress sites A critical-severity vulnerability in the Advanced Custom Fields: Extended (ACF Extended) plugin for WordPress can be exploited remotely by unauthenticated attackers to obtain administrative permissions.

#ACF plugin bug gives hackers admin on 50,000 #WordPress sites

www.bleepingcomputer.com/news/security/acf-plugin...

#cybersecurity

0 0 0 0

*_jߍyrope

@jrp.hub.kliklak.net.ap.brid.gy

1 month ago

Shameless self promotion: #^aircushionfinish.bandcamp.com/album/lambs-quarters
by @Air Cushion Finish

#Berlin #Montreal #NickKuepfer #aircushionfinish #acf #ImprovisedMusic @ImprovisedMusic #ambient #SlowCore #vocalism

3 0 0 0

GLOBAL Visibility aéPiot - by aePiot.ro

@globalvisibility.bsky.social

1 month ago

Cabildo Abierto Una espacio de discusión argentino. Sumate a conectar con otros y construir conocimiento colectivo.

cabildoabierto.ar/perfil/globa...

better-experience.blogspot.com/2026/01/the-...

#PRESIDENTI #DELL #ACF #FIORENTINA
multi-search-tag-explorer.allgraph.ro/advanced-sea...
aepiot.com

0 0 0 0

@katelam.bsky.social

2 months ago

Just heard Adam #Bandt as #ACF - I’ve missed his voice. Looked up the now #Melbourne member - never heard of/from her. Another capable, competant & silenced #Labor woman I suppose

0 0 1 0

GLOBAL Visibility aéPiot - by aePiot.ro

@globalvisibility.bsky.social

2 months ago

MultiSearch Tag Explorer MultiSearch Tag Explorer - Explore tags and search results by aéPiot

#DOG #MAN #FILM
multi-search-tag-explorer.allgraph.ro/advanced-sea...
#ACF #FIORENTINA
headlines-world.com/advanced-sea...
2025 26 #BANGLADESH #WOMEN S #FOOTBALL #LEAGUE
allgraph.ro/advanced-sea...
allgraph.ro

0 0 0 0

Somos Jacare

@somosjacare.bsky.social

2 months ago

TCAR quase toma o golpe #carros #acf #podcast #gearhead #mecanica #tcar YouTube video by Engatando Cortes

TCAR quase toma o golpe #carros #acf #podcast #gearhead #mecanica #tcar
www.youtube.com/shorts/UqcQF...

1 0 0 0

Nonilex

@nonilex.masto.ai.ap.brid.gy

2 months ago

Original post on masto.ai

O’Neill, who is also serving as acting director of the #CDC, also said in the post Tuesday that payments across the #US through the #ACF, an agency within the #HHS, will now require “justification & a receipt or photo evidence” before money is sent. They have also launched a “fraud”-reporting […]

0 1 1 0

@heysagelife.bsky.social

2 months ago

Awakening under the Serengeti Skies Explore life's vibrant tapestry from family bonds to cultural rhythms as we journey under the Serengeti's expansive skies.

Each sunrise gifts us a fresh start, full of potential and beauty, inviting us to explore life's rich tapestry. #ACF #Sage
heysage.life/daily-brief/...

0 0 0 0

Anna M. Crawford

@annacrawford.bsky.social

2 months ago

New in #ACF & #abortionpolicy research, @cmweible.bsky.social and I introduce the novel concept “advocacy coalition representation” to describe the ways that coalition members construct & interact with their constituencies 😎

onlinelibrary.wiley.com/doi/10.1111/...

2 0 0 0

LOGO PED - Semantic Tags by aéPiot

@logo-ped.bsky.social

3 months ago

MultiSearch Tag Explorer MultiSearch Tag Explorer - Explore tags and search results by aéPiot

#ACF
multi-search-tag-explorer.headlines-world.com/advanced-sea...
#LIST OF #AWARDS #AND #NOMINATIONS #RECEIVED BY #AMANDA #SEYFRIED
allgraph.ro/advanced-sea...
MultiSearch Tag Explorer

aepiot.ro

0 0 0 0

Nick Brown

@nickbrown-hpc.bsky.social

3 months ago

Thanks @kieranleach.bsky.social for doing a great tour of the @epcc.bsky.social #ACF facility for Christian from @unipaderborn.bsky.social and @stevenwright.bsky.social from @yorkuniversity.bsky.social. I always learn a lot from these, and was great to see the new #Cirrus on its 1st day of service

2 0 0 0

Action contre la Faim Cameroun

@acfcameroun.bsky.social

3 months ago

👩🏾‍🍼 Au CSI Hilele, @actioncontrelafaim.bsky.social sensibilise les femmes enceintes à l’importance du fer et de l’acide folique pendant la grossesse.
Grâce à la générosité du peuple américain, nous renforçons la santé maternelle dans le Logone-et-Chari.

#USA #SantéMaternelle #Nutrition #ACF

1 0 0 0

LLMs

@llms.activitypub.awakari.com.ap.brid.gy

4 months ago

Original post on wpbuilds.com

This Week in WordPress #354 This episode covers WordPress 6.9’s new features and testing guide, major UK cyber attacks, security insights, and why Malwarebytes chose WordPress. The panel discusse...

#News #6.9 #ACF #AI #API #Press #Black #Friday #Block […]

[Original post on wpbuilds.com]

0 1 0 0

LLMs

@llms.activitypub.awakari.com.ap.brid.gy

4 months ago

Original post on wpbuilds.com

This Week in WordPress #354 This episode covers WordPress 6.9’s new features and testing guide, major UK cyber attacks, security insights, and why Malwarebytes chose WordPress. The panel discusse...

#News #6.9 #ACF #AI #API #Press #Black #Friday #Block […]

[Original post on wpbuilds.com]

0 1 0 0

💙Mads Wulff💛

@madswulff.dk

4 months ago

Support FBK For a free and happy Russia! FBK is based on you and your support.

Putin has demanded that the Anti-Corruption Foundation be declared a terrorist organization.

Support their mission to make Russia a free, peaceful, and prosperous country.

donate.fbk.info/en

#ACF #AntiCorruptionFoundation