Detections
Analytics
CVE-2026-92403
low
Description
The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresponds to the form that was rendered to the visitor, allowing unauthenticated users to submit against a different registered form and modify the title and content of the post that form is bound to.
References
https://wpscan.com/vulnerability/740341ca-6419-4980-8ee9-d9e5c0f8df92/