CVE-2026-92403

Secure Custom Fields is a WordPress plugin that, in versions before 6.9.4 , fails to properly verify that a front-end form submission corresponds to the form rendered to the visitor. This allows unauthenticated users to substitute a different registered form ID, enabling them to modify the title ...