| CVE-2026-97192 |
Secure Custom Fields < 6.9.8 - Contributor+ Admin-Restricted Custom Field Update via Post Save Path
|
Not rated
|
Nov 8, 2026 |
| CVE-2026-97193 |
Secure Custom Fields < 6.9.8 - Contributor+ Relationship Field Update on Arbitrary Objects via IDOR
|
Not rated
|
Nov 8, 2026 |
| CVE-2026-97194 |
Secure Custom Fields < 6.9.8 - Contributor+ Unpublished Post Title and Status Disclosure via Relational Fields
|
Not rated
|
Nov 8, 2026 |
| CVE-2026-97195 |
Secure Custom Fields < 6.9.8 - Admin+ Stored XSS via HTML Attribute Name Injection into Field Definition
|
Not rated
|
Nov 8, 2026 |
| CVE-2026-92403 |
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission…
|
3.7
Low
|
Sep 19, 2026 |
| CVE-2024-9529 |
The Secure Custom Fields WordPress plugin before 6.3.9, Secure Custom Fields WordPress plugin before 6.3.6.3, Advanced…
|
6.6
Medium
|
Nov 15, 2024 |