PLUGIN SECURITY
Is Acf Better Search safe?
This plugin adds to default WordPress search engine the ability to search by content from selected fields of Advanced Custom Fields plugin.
What this plugin does
- Slug:
acf-better-search - Author: Mateusz Gbiorczyk
- 40000+ active installs
- 98/100 rating (165 reviews on wordpress.org)
- 892675 all-time downloads
- On WordPress.org since 2016-12-18
acf searchadvanced custom fieldsbetter searchextended searchsearch
Maintenance status
- Latest known version: 4.5.0
- Last updated: 2026-08-18 10:10pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Acf Better Search. Reported between 2019 and 2019.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2019-14682 | ACF: Better Search [acf-better-search] < 3.3.1 | Cross-Site Request Forgery (CSRF) | Medium 4.3 | < 3.3.1 | 3.3.1 | 2019-06-27 | ✓ fixed in latest |
| — | ACF: Better Search [acf-better-search] < 3.3.1 | — | Unknown | < 3.3.1 | 3.3.1 | 2019-06-27 | ✓ fixed in latest |
How to fix it
Keep Acf Better Search updated — 4.5.0 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- ACF Content Analysis for Yoast SEO — 100000+ active installs — 82/100 (35) — max PHP 8.4
- Advanced Custom Fields: Font Awesome Field — 90000+ active installs — 98/100 (36) — max PHP 8.4
- Table Field Add-on for ACF and SCF — 50000+ active installs — 98/100 (59) — max PHP 8.4
- Advanced Custom Fields: Gravity Forms Add-on — 30000+ active installs — 84/100 (14)
- ACF Field For CF7 — 10000+ active installs — 94/100 (11)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.