WP Manifestindependent plugin directory
manifest / content / acf-clone-fields

ACF Clone Fields WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

WordPress plugin to clone Advanced Custom Fields between posts with granular field selection

★ 0stars
20release downloads
v1.3.1latest · 27d ago

Install

Download acf-clone-fields-v1.3.1.zip From the v1.3.1 release on GitHub, Sep 25, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/silverassist/acf-clone-fields/releases/download/v1.3.1/acf-clone-fields-v1.3.1.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Silver Assist - ACF Clone Fields

Clone Advanced Custom Fields between WordPress posts with precision and confidence. Select individual fields, preview changes, and create automatic backups - all from a simple sidebar interface.

✨ Features

  • 📋 Selective Field Cloning: Choose exactly which fields to copy - no more all-or-nothing
  • 🔄 Automatic Backups: Every clone operation creates a restore point (v1.1.0+)
  • ⚠️ Smart Conflict Detection: See which fields will overwrite existing data before you click
  • 📊 Visual Field Preview: View field types and values before cloning
  • 🎯 Same Post Type Only: Clone safely between posts of the same type
  • ⚙️ Flexible Configuration: Enable/disable cloning per post type via Settings Hub
  • 🔒 Built-in Security: All operations include permission checks and data validation
  • 🚀 Automatic Updates: GitHub-powered updates directly in WordPress admin
  • 🆓 ACF Free & Pro Compatible: Works with both ACF versions - Pro fields available when ACF Pro is active

📋 Requirements

  • WordPress: 5.0 or higher
  • PHP: 8.2 or higher
  • ACF Plugin: Advanced Custom Fields (free) OR Advanced Custom Fields Pro
    • ACF Free: Supports basic fields (text, image, select, etc.)
    • ACF Pro: Adds support for advanced fields (repeater, group, flexible content, clone)

Note: The plugin works with either version. Pro-only field types are automatically excluded when using ACF free.

📦 Installation

Method 1: WordPress Admin (Recommended)

  1. Download the latest release from GitHub Releases
  2. Go to Plugins → Add New → Upload Plugin
  3. Choose the ZIP file and click Install Now
  4. Click Activate Plugin

Method 2: FTP Upload

  1. Download and extract the ZIP file
  2. Upload the silver-assist-acf-clone-fields folder to /wp-content/plugins/
  3. Activate from WordPress Admin → Plugins

Method 3: WP-CLI

wp plugin install silver-assist-acf-clone-fields.zip --activate

⚙️ Configuration

Enable Post Types

  1. Navigate to Silver Assist → Settings Hub in WordPress admin
  2. Click ACF Clone Fields
  3. Select post types that should support field cloning
  4. Configure backup retention settings (optional)
  5. Save settings

Backup Settings

  • Retention by Age: Keep backups for X days (default: 30 days)
  • Retention by Count: Keep last X backups per post (default: 10 backups)
  • Both policies work together to manage storage

🚀 How to Use

Quick Start: Clone Fields in 4 Steps

Step 1: Open the Clone Interface

  1. Edit any post that belongs to an enabled post type
  2. Find "Clone Custom Fields" meta box in the sidebar (right panel)
  3. Click "Clone Fields from Another Post"

Step 2: Select Source Post

  • Choose the post you want to copy fields from
  • View field statistics for each available post
  • Click Continue to proceed

Step 3: Select Fields to Clone

  • Individual Selection: Check specific fields you want to copy
  • Group Selection: Use "Select All" to choose entire field groups
  • Preview Information:
    • ✅ Green indicators show fields with values
    • ⚠️ Yellow warnings show fields that will overwrite existing data
    • 📊 Field type and current value displayed

Step 4: Configure & Execute

  • Backup Option: Automatically enabled - creates a restore point before cloning
  • Overwrite Settings: Choose to replace existing values or preserve them
  • Click "Clone Selected Fields" to execute
  • View success confirmation with count of cloned fields

Managing Backups

The Backups tab in the meta box shows:

  • List of all backup points for the current post
  • Creation date and cloned field count
  • Restore: Revert to a previous backup point
  • Delete: Remove individual backups
  • Cleanup: Apply retention policies manually

💡 Use Cases

Content Migration

Clone product specifications from a template post to new products

Bulk Updates

Update common fields across multiple posts by cloning from a master post

Content Duplication

Create new posts with similar ACF data without manual reentry

Template Posts

Maintain template posts and clone their structure to new content

🔒 Security & Privacy

  • Permission Checks: Only users with edit_posts capability can clone fields
  • Nonce Verification: All operations secured with WordPress nonces
  • Data Validation: Input sanitization and output escaping on all operations
  • Audit Trail: Optional logging of clone operations for review

❓ Troubleshooting

"No Source Posts Available"

Problem: Can't find posts to clone from

Solution:

  1. Verify you have other posts of the same post type
  2. Check that ACF fields are assigned to those posts
  3. Confirm post type is enabled in Settings Hub
  4. Ensure you have edit permissions for the post type

"Clone Operation Failed"

Problem: Fields didn't copy

Solution:

  1. Check browser console for errors (F12 → Console tab)
  2. Verify ACF Pro is active and up to date
  3. Ensure source post has values in selected fields
  4. Check WordPress debug.log for detailed errors

"Modal Won't Open"

Problem: Nothing happens when clicking clone button

Solution:

  1. Clear browser cache and hard reload (Ctrl+Shift+R or Cmd+Shift+R)
  2. Check browser console for JavaScript errors
  3. Test for plugin conflicts by temporarily disabling other plugins
  4. Verify jQuery is loaded on the page

"Backups Not Creating"

Problem: No backup created before clone operation

Solution:

  1. Check database table wp_acf_field_backups exists
  2. Verify database user has CREATE and INSERT permissions
  3. Check WordPress debug.log for database errors
  4. Increase PHP memory limit if working with large field sets

Need More Help?

  • Debug Mode: Enable WP_DEBUG and WP_DEBUG_LOG in wp-config.php
  • GitHub Issues: Report bugs or request features
  • Documentation: See CONTRIBUTING.md for developer documentation

🔄 Automatic Updates

The plugin includes automatic update functionality via GitHub releases. When new versions are published, you'll see update notifications in your WordPress admin dashboard just like any other plugin.

📄 License

Licensed under the PolyForm Noncommercial License 1.0.0.

  • ✅ Free: For personal, educational, and noncommercial use
  • ❌ Commercial Use: Requires a separate license

👨‍💻 For Developers

Want to contribute or extend the plugin? See CONTRIBUTING.md for:

  • Development setup and coding standards
  • Testing guidelines and CI/CD workflows
  • Architecture documentation
  • Extension hooks and filters
  • Release process

Made with ❤️ by Silver Assist

Releases

8 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v1.3.1 latest
Sep 25, 2026 27d ago
acf-clone-fields-v1.3.1.zip +2 assets
5
acf-clone-fields-v1.3.1.zip4
acf-clone-fields-v1.3.1.zip.sha2561
acf-clone-fields-v1.3.1.zip.md50
Aug 24, 2026 2mo ago
acf-clone-fields-v1.3.0.zip +2 assets
3
acf-clone-fields-v1.3.0.zip3
acf-clone-fields-v1.3.0.zip.sha2560
acf-clone-fields-v1.3.0.zip.md50
Mar 9, 2026 7mo ago
acf-clone-fields-v1.2.1.zip.md5 +2 assets
0
acf-clone-fields-v1.2.1.zip.md50
acf-clone-fields-v1.2.1.zip.sha2560
acf-clone-fields-v1.2.1.zip0
Mar 3, 2026 7mo ago
acf-clone-fields-v1.2.0.zip +2 assets
4
acf-clone-fields-v1.2.0.zip3
acf-clone-fields-v1.2.0.zip.sha2561
acf-clone-fields-v1.2.0.zip.md50
Mar 2, 2026 7mo ago
silver-assist-acf-clone-fields-v1.1.2.zip +3 assets
2
silver-assist-acf-clone-fields-v1.1.2.zip2
silver-assist-acf-clone-fields-v1.1.2.zip.sha2560
silver-assist-acf-clone-fields-v1.1.2.zip.md50
build-info.txt0
Nov 9, 2025 11mo ago
silver-assist-acf-clone-fields-v1.1.1.zip +3 assets
8
silver-assist-acf-clone-fields-v1.1.1.zip5
silver-assist-acf-clone-fields-v1.1.1.zip.md51
build-info.txt1
silver-assist-acf-clone-fields-v1.1.1.zip.sha2561
Nov 8, 2025 11mo ago
silver-assist-acf-clone-fields-v1.1.0.zip +3 assets
6
silver-assist-acf-clone-fields-v1.1.0.zip3
silver-assist-acf-clone-fields-v1.1.0.zip.md51
build-info.txt1
silver-assist-acf-clone-fields-v1.1.0.zip.sha2561
Oct 30, 2025 11mo ago
build-info.txt +3 assets
1
build-info.txt1
silver-assist-acf-clone-fields-v1.0.0.zip.md50
silver-assist-acf-clone-fields-v1.0.0.zip.sha2560
silver-assist-acf-clone-fields-v1.0.0.zip0
C- grade

Security

ACF Clone Fields 1.3.1 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.3.1
Findings
1
Worst severity
high
Content hash
cfea3f233b6dbb2fe7b85baa…

Findings

  • high ACF clone AJAX reads/clones source post fields without edit_post on source (IDOR)

    missing_capability

    handle_get_source_fields and handle_execute_clone verify nonce and current_user_can('edit_post', $target_post_id) only. They do not require edit_post (or even read) on $source_post_id. Helpers::get_posts_by_type correctly filters the source *list* for authors, but a user can still POST an arbitrary same-type source_post_id. get_available_fields()/process_field() loads real ACF values via get_field(); the JSON preview returns trimmed text/email/url values; execute_clone copies those values onto the attacker's target post. An Author editing their own post can thus exfiltrate or import ACF data from another author's draft/private post of the same type if they know or guess the ID. Editors with edit_others_posts are less affected. Vendor GitHub updater AJAX is admin-only.

    includes/Admin/Ajax.php:156-315

    Recommendation

    Require current_user_can('edit_post', $source_post_id) (or at least a read capability consistent with ACF field privacy) before returning field data or cloning. Reject mismatched/unauthorized source IDs even if post types match.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.