CVE-2026-97195 | Secure Custom Fields Plugin up to 6.9.7 on WordPress Field Definition cross site scripting

November 8, 2026 Yanac

A vulnerability was found in Secure Custom Fields Plugin up to 6.9.7 on WordPress and classified as problematic. This affects an unknown part of the component Field Definition. The manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-97195. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More