If you’re a WordPress developer, designer, or site owner using the Advanced Custom Fields (ACF) plugin, you may have noticed that ACF is no longer available on WordPress.org. This unexpected change has left many users confused about its future and what steps they need to take to keep their websites running smoothly.
In this article, we’ll explore why ACF was removed, the implications for users, and what you need to do to ensure your site remains secure and functional.
What is the ACF Plugin?
Advanced Custom Fields (ACF) is a powerful WordPress plugin that enables users to add custom fields to their website without needing to write HTML code. It allows developers and non-developers to build dynamic, flexible websites with ease. ACF comes in two versions:
• ACF Free Version: Ideal for simple custom field needs.
• ACF Pro Version: A premium version offering advanced fields and features for building more complex sites.
Why Was ACF Removed from WordPress.org?
The removal of ACF from WordPress.org has left the community puzzled. The official ACF blog suggests that the plugin was taken over by WordPress.org without the ACF team’s consent. The reasons remain somewhat unclear, but potential reasons include:
1. Security Concerns: There may have been a security vulnerability that prompted the removal to protect users.
2. Commercial Upsells: WordPress.org may have acted due to its policies against plugins containing commercial upsells in free versions.
Regardless of the reason, the removal of ACF has left users questioning what happens next.
Pros and Cons of This Change
Pros:
• Potential Security Fixes: If the removal was due to security issues, users may benefit from being protected from vulnerabilities.
• Commercial Compliance: WordPress.org could be ensuring that plugins adhere to its guidelines, potentially offering a cleaner, more transparent experience for users.
Cons:
Loss of Control for ACF Team: The ACF team no longer controls the code on WordPress.org, raising concerns about future updates.
• Impact on Free Version Users: Users of the free version must now download version 6.3.8 directly from ACF’s website to continue receiving legitimate updates.
• Issues with Modified Versions: Users using modified versions like “Secure Custom Fields” must revert to the original ACF version for security and support.
What Should ACF Users Do?
If you’re using ACF on your website, here’s what you should do to keep your site secure:
1. Download the Latest Version: Ensure that you’re running version 6.3.8 of ACF, available directly from the ACF website.
2. Revert from Modified Versions: If you’re using any modified versions like “Secure Custom Fields,” switch back to the original ACF plugin to ensure proper updates and security.
3. Monitor Updates: Since the ACF team no longer maintains the free version on WordPress.org, regularly check the ACF website or subscribe to their newsletter for updates.
4. Consider Upgrading to ACF Pro: If ACF is integral to your website, it may be worth upgrading to ACF Pro, which offers more features and priority support.
How to update Advanced Custom Fields plugin after removal from WordPress.org
If you have a site managed elsewhere using the free version of ACF, in order to get genuine ACF updates you must perform a one-time download of the 6.3.8 version via advancedcustomfields.com to remain safe in the future. After this one-time download you will be able to update as usual via the WP Admin panel.
You can also follow the same process if your site has already been upgraded to the modified “Secure Custom Fields” plugin, to get back to a genuine version of ACF.
Mullenweg’s actions are extraordinarily concerning and pose the grave risk of upending and irreparably harming the entire WordPress ecosystem. His attempt to unilaterally take control of this open platform that we and so many other plugin developers and contributors have relied on, in the spirit of sharing plugins for all, provides further evidence of his serious abuse of trust, manifold conflicts of interest, and breach of the promises of openness and integrity in the community.
Looking Ahead: The Future of ACF
The removal of ACF from WordPress.org raises questions about the plugin’s future. However, the core ACF team continues to develop and support the plugin, ensuring that it remains a powerful tool for WordPress users. The key is to stay informed and proactive by keeping your site updated with the latest versions from trusted sources.
Conclusion: Stay Informed, Stay Secure
While the removal of ACF from WordPress.org may seem like a significant shift, it doesn’t spell the end for the plugin.
By taking proactive steps—such as downloading the latest version, monitoring updates, and considering ACF Pro—users can continue to enjoy the flexibility and power that ACF offers for building dynamic WordPress websites.
Make sure to stay updated, and keep your site secure by following the latest guidance from the ACF team.
