Critical WordPress Flaw in ACF Extended Grants Hackers Instant Admin Rights
A critical vulnerability (CVE-2025-14533) in the ACF Extended WordPress plugin allows unauthenticated attackers to gain administrative privileges via user creation forms. Users must update to version 0.9.2.2 immediately to prevent complete site compromise.