Skip to main content
WP HealthKit

Is Advanced Custom Fields (ACF®) Secure?

B
WP 7.1-RC2: ready

Grade B — Good

Moderate Risk

Advanced Custom Fields (ACF®) receives a solid Grade B from WP HealthKit's 62-layer security audit, with 226 findings — mostly low-to-medium severity.

Grade

B

Findings

226

Critical

0

Standards

100/100

Active Installs

2.0M+

Last Audited

71 days ago

What We Found

PHP Version Mismatch: Declared vs RequiredHIGH
Deprecated: each()HIGH
59 unprefixed global functions detectedHIGH
Asset handle collision: 'acf-field-group'HIGH
Asset handle collision: 'acf-field-group'HIGH

+ 221 more findings in the full report.

How It Compares

D

Elementor Website Builder – more than just a page builder

10.0M+ installs

A

Classic Editor

9.0M+ installs

A

Classic Widgets

2.0M+ installs

View Full Report Audit Your Own Plugin

Frequently Asked Questions

Is Advanced Custom Fields (ACF®) safe to use?

Advanced Custom Fields (ACF®) receives a solid Grade B from WP HealthKit's 62-layer security audit, with 226 findings — mostly low-to-medium severity.

How many vulnerabilities does Advanced Custom Fields (ACF®) have?

WP HealthKit's audit found 226 findings for Advanced Custom Fields (ACF®): 0 critical, 30 high, and 124 medium severity issues.

What is Advanced Custom Fields (ACF®)'s security grade?

Advanced Custom Fields (ACF®) has an overall security grade of B (Good) based on WP HealthKit's 62-layer security audit.