Inc2734
9 CVEs across 5 Inc2734 products. Browse Inc2734 vulnerabilities, severities, and proof-of-concept exploits.
Inc2734 products with known CVEs
Inc2734 CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-2594 | Medium | 6.4 | 2026-07-17 | The Smart Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.7. This is due to insufficient… |
CVE-2026-3004 | Medium | 6.4 | 2026-05-13 | The Snow Monkey Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-slick' attribute in all versions up to, and including, 2… |
CVE-2026-5436 | High | 8.1 | 2026-04-08 | The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1. This is due to insufficient validation… |
CVE-2026-4347 | High | 8.1 | 2026-04-02 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the 'generate_user_filepath' function a… |
CVE-2026-4066 | Medium | 4.3 | 2026-03-23 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() fu… |
CVE-2026-1056 | Critical | 9.8 | 2026-01-28 | The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' fun… |
CVE-2025-10137 | Medium | 5.4 | 2025-09-26 | The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request() function. This… |
CVE-2024-1995 | Medium | 4.3 | 2024-03-20 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() fu… |
CVE-2023-6316 | Critical | 9.8 | 2024-01-11 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the '_single_file_upload' function in v… |
CVE-2023-6559 | High | 7.5 | 2023-12-16 | The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. This is due to the plugin not properl… |