Important Vulnerability on Advanced Custom Fields Plugin for WordPress

We analyzed an injected copy of Elementor Pro and found three hidden mechanisms that silently hand control of a site's content pipeline to a third-party server. The plugin looks and functions like the original. Only a small code block at the top changes what happens behind the scenes.