UNKNOWN NVD

CVE-2026-92403

The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresponds to the form that was rendered to th

The Secure Custom Fields WordPress plugin before 6.9.4 does not properly verify that a front-end form submission corresponds to the form that was rendered to the visitor, allowing unauthenticated users to submit against a different registered form and modify the title and content of the post that form is bound to.

References

https://wpscan.com/vulnerability/740341ca-6419-4980-8ee9-d9e5c0f8df92/

Published: 2026-09-19 · Source: NVD · Feed updated: 2026-09-19

This unknown severity vulnerability was published on 2026-09-19 via NVD.

vulnfeed aggregates 14156 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.