Known vulnerabilities in Unknown Custom Fields
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-16940 | The Custom Fields WordPress plugin before 1.5.1 does not validate a user-supplied file path before deletion, allowing… | 10.0 Critical | Aug 5, 2026 |