Skip to content

Inc2734 vulnerabilities

Products

Newest

inc2734 smart custom fields Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title CVE-2026-2594 6.4 MediumJuly 17, 2026
inc2734 snow monkey blocks Snow Monkey Blocks <= 24.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-slick' Attribute CVE-2026-3004 6.4 MediumMay 13, 2026
inc2734 mw wp form MW WP Form <= 5.1.1 - Unauthenticated Arbitrary File Move via regenerate_upload_file_keys CVE-2026-5436 8.1 HighApril 8, 2026
inc2734 mw wp form MW WP Form <= 5.1.0 - Unauthenticated Arbitrary File Move via move_temp_file_to_upload_dir CVE-2026-4347 8.1 HighApril 2, 2026
inc2734 smart custom fields Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search CVE-2026-4066 4.3 MediumMarch 23, 2026
inc2734 snow monkey forms Snow Monkey Forms <= 12.0.3 - Unauthenticated Arbitrary File Deletion via Path Traversal CVE-2026-1056 Public exploit EPSS 13.3% 9.8 CriticalJanuary 28, 2026
inc2734 snow monkey Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery CVE-2025-10137 5.4 MediumSeptember 26, 2025
inc2734 smart custom fields WordPress Smart Custom FIelds plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-22308 6.5 MediumJanuary 7, 2025
inc2734 smart custom fields Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure CVE-2024-1995 4.3 MediumMarch 20, 2024
inc2734 mw wp form, mw wp form project wp form +1 more MW WP Form <= 5.0.1 - Unauthenticated Arbitrary File Upload CVE-2023-6316 9.8 CriticalJanuary 11, 2024
inc2734 mw wp form MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion CVE-2023-6559 7.5 HighDecember 16, 2023
2inc snow monkey forms Directory traversal vulnerability in Snow Monkey Forms versions v5.1.0 and earlier allows a... CVE-2023-32623 9.1 CriticalJune 28, 2023
inc2734 snow monkey forms, snow monkey forms project monkey forms +1 more Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a... CVE-2023-28413 9.8 CriticalMay 23, 2023