Important Vulnerability on Advanced Custom Fields Plugin for WordPress

We are issuing this security advisory regarding a vulnerability discovered in the AI-Bolit component of Imunify products. A patch for this vulnerability was released on October 23, 2025, and has already been automatically deployed to the vast majority of servers.

Recently two bugs - DEF-18045 and DEF-17281 were discovered in the AI-Bolit shipped with Imunify products. It could potentially cause arbitrary command execution, so we made sure to fix it promptly.