Inc2734 Smart Custom Fields
3 CVEs affecting Inc2734 Smart Custom Fields. Latest disclosed: 2026-07-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-2594 | Medium | 6.4 | 2026-07-17 | The Smart Custom Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 5.0.7. This is due to insufficient… |
CVE-2026-4066 | Medium | 4.3 | 2026-03-23 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() fu… |
CVE-2024-1995 | Medium | 4.3 | 2024-03-20 | The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() fu… |