Reply To: Front end form file upload security review…

• John Huebner

• May 16, 2018 at 10:29 pm

Yes, you are correct. ACF only looks at the file extension and not the file’s mime type. This should be submitted as a new support ticket here https://support.advancedcustomfields.com/new-ticket/