This WordPress plugin security flaw could put millions of websites at risk - find out if you are affected

Wordpress brand logo on computer screen. Man typing on the keyboard.

A popular plugin for the Wordpress website builder with more than two million active installs carried a severe flaw which allowed threat actors to steal sensitive data from visitors and, in some cases, take over the website, entirely.

The plugin is called Advanced Custom Fields which, together with its Pro version, gives website administrators more control over the website’s content and data.