inc2734 Smart Custom Fields

• CVE-2026-2594 Medium 6.4 Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title 0.3%
• CVE-2026-4066 Medium 4.3 Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search 0.3%
• CVE-2024-1995 Medium 4.3 Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure 0.6%