Publicly announced a vulnerability after blocking the dev acct from updating in the WP .org repository. Disgusting. This impacts millions of users that are not even on WP Engine. If you are a ACF free plugin user: www.advancedcustomfields.com/blog/install...www.reddit.com/r/Wordpress/...

It's really kind of unbelievable. You don't even mention there's a vuln until the 30 days are up. Now? Now all the bad guys in the world are scouring the code, looking for the exploit. And he's fool enough to think it drive customers away! It will, but not from WordPress Engines!!