Smart Custom Fields
Healthy: maintained, last release 16 Jul 2026, 8 releases in 24 months, no unpatched vulnerabilities.
Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4.
| Ownership | 100 |
|---|---|
| Maintenance | 75 |
| Security | 85 |
| Support | 70 |
| Reputation | 85 |
Quick answers
- Is Smart Custom Fields still maintained?
- Yes. Last release 16 Jul 2026, 8 releases in the last 24 months. 16 Jul 2026 · wordpress.org
- Who owns Smart Custom Fields, and has it changed hands?
- No change recorded. Main committer inc2734 since Oct 2014. 4 Nov 2026 · SVN log
- Was Smart Custom Fields removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Smart Custom Fields safe?
- 4 known vulnerabilities, all fixed (latest in 5.0.8). Not on the exploited list. 16 Jul 2026 · Wordfence Intelligence
- Is the latest Smart Custom Fields update safe to install?
- No ownership change before 5.0.8. No one-star spike after it. 16 Jul 2026 · Release history
Active signals
Facts we detected, with links to the source.
- WarningMNT-2Tested up to WordPress 6.8.12, 3 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| inc2734 | 9 Oct 2014 to 16 Jul 2026, 135 commits |
|---|
1 committer recorded. No ownership change since 2014.
Maintenance
- Last release
- 4 months ago
- Releases, 24 months
- 8
- Tested up to
- 6.8 vs 7.1
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 3 |
| Q3 2025 | 1 |
| Q4 2025 | 2 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 16 Jul 2026. Tested up to 6.8, 3 major versions behind WordPress 7.1.
Reputation
Last 90 days: 5.0 (1 review). Lifetime: 4.9.
| Q1 2025 | 3.0 |
|---|---|
| Q3 2025 | 5.0 |
| Q4 2026 | 5.0 |
Average rating rose from 3.0 to 5.0 between Q1 2025 and Q4 2026.
| 5 star | 20 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 0 |
Security record
3 vulnerabilities in 24 months (4 on record), all patched (latest fixed in 5.0.8).
Show 4 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 16 Jul 2026 | Smart Custom Fields <= 5.0.7 - Authenticated (Author+) Stored Cross-Site Scripting via Attachment Title | 6.4 | <= 5.0.7 | 5.0.8 | Patched before disclosure |
| 23 Mar 2026 | Smart Custom Fields <= 5.0.6 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via Relational Post Search | 4.3 | <= 5.0.6 | 5.0.7 | Patched before disclosure |
| 6 Jan 2025 | Smart Custom Fields <= 5.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 5.0.0 | 5.0.1 | 143 |
| 19 Mar 2024 | Smart Custom Fields <= 4.2.2 - Missing Authorization to Authenticated (Subscriber+) Post Content Disclosure | 4.3 | <= 4.2.2 | 5.0.0 | Patched before disclosure |
Changelog mentions of security fixes: 5.0.8 (vulnerability).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
50,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 418 |
|---|---|
| 11 May 2026 | 752 |
| 18 May 2026 | 914 |
| 25 May 2026 | 743 |
| 1 Jun 2026 | 740 |
| 8 Jun 2026 | 652 |
| 15 Jun 2026 | 628 |
| 22 Jun 2026 | 615 |
| 29 Jun 2026 | 622 |
| 6 Jul 2026 | 602 |
| 13 Jul 2026 | 9,525 |
| 20 Jul 2026 | 3,139 |
| 27 Jul 2026 | 1,998 |
| 3 Aug 2026 | 1,579 |
| 10 Aug 2026 | 887 |
| 17 Aug 2026 | 1,385 |
| 24 Aug 2026 | 1,120 |
| 31 Aug 2026 | 1,166 |
| 7 Sep 2026 | 982 |
| 14 Sep 2026 | 805 |
| 21 Sep 2026 | 951 |
| 28 Sep 2026 | 1,027 |
| 5 Oct 2026 | 996 |
| 12 Oct 2026 | 801 |
| 19 Oct 2026 | 4,103 |
| 26 Oct 2026 | 2,948 |
| 2 Nov 2026 | 337 |
Weekly downloads over the last 4 weeks are 37% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 5.0.8 |
|---|---|
| Author | Takashi Kitajima |
| Added | 9 Oct 2014 |
| Last updated | 16 Jul 2026 |
| Active installs | 50,000+ |
| Requires WordPress | 6.4 |
| Tested up to | 6.8.12 |
| Requires PHP | 7.4 |
| Category | Developer Tools & Customization > Code Snippets & Custom Code |
| Tags | meta, field, custom, meta field, custom field |
Other plugins by this author: Snow Monkey Editor, Snow Monkey Forms, Snow Monkey Blocks, MW IP Denied, MW Google Maps, Author Profile Widget, MW WP Hacks, MW Auth, Latest Posts Template Widget, Markdown Importer, MW Theme URI Shortcode
Questions
Is Smart Custom Fields still maintained?
Yes. Last release 16 Jul 2026, 8 releases in the last 24 months.
Who owns Smart Custom Fields, and has it changed hands?
No change recorded. Main committer inc2734 since Oct 2014.
Was Smart Custom Fields removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Smart Custom Fields safe?
4 known vulnerabilities, all fixed (latest in 5.0.8). Not on the exploited list.
Is the latest Smart Custom Fields update safe to install?
No ownership change before 5.0.8. No one-star spike after it.