Skip to content
Noroxi

Smart Custom Fields

smart-custom-fields · plugin

Known security vulnerabilities for Smart Custom Fields. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Jul 16, 2026

Vulnerabilities

  • CVE-2025-22308

    WordPress Smart Custom FIelds plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-2594

    Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title

    Medium 6.4

  • CVE-2026-4066

    Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search

    Medium 4.3

  • CVE-2024-1995

    Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure

    Medium 4.3

← Back to directory