Plugin icon

Smart Custom Fields

smart-custom-fields

Vulnerabilities:

4

Last Updated:

July 16, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-07-16
Title
Smart Custom Fields < 5.0.8 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title
Fixed in
Fixed in 5.0.8
CVSS
5.5 (medium)
Published
2026-03-23
Title
Smart Custom Fields < 5.0.7 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search
Fixed in
Fixed in 5.0.7
CVSS
2.7 (low)
Published
2025-01-06
Title
Smart Custom Fields < 5.0.1 - Contributor+ Stored XSS
Fixed in
Fixed in 5.0.1
CVSS
5.9 (medium)
Published
2024-03-19
Title
Smart Custom Fields < 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure
Fixed in
Fixed in 5.0.0
CVSS
4.3 (medium)