What’s Vulnerable › Products

inc2734 Smart Custom Fields vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your inc2734 Smart Custom Fields version is affected

Latest inc2734 Smart Custom Fields vulnerabilities

• CVE-2026-2594 — Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title (CVSS 6.4)
• CVE-2026-4066 — Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search (CVSS 4.3)
• CVE-2024-1995 — Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure (CVSS 4.3)