= 6.8.3 =
*Release Date 2nd June 2026*
* Security – The oEmbed field’s AJAX preview no longer performs URL discovery for users without the `edit_posts` capability.
= 6.8.2 =
*Release Date 26th May 2026*
* Security – ACF frontend forms (`acf_form()`) now respect the `post_title` and `post_content` form configuration options when processing submissions, ensuring those values are only saved when the form is configured to accept them. Thanks to Sarawut Poolkhet (MisterHelloz) for the responsible disclosure.