What’s Vulnerable › Products
hiroaki-miyashita Custom Field Template vulnerabilities
15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.
Check whether your hiroaki-miyashita Custom Field Template version is affected
Latest hiroaki-miyashita Custom Field Template vulnerabilities
- CVE-2026-12995 — Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter (CVSS 4.3)
- CVE-2026-9855 — Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter (CVSS 6.5)
- CVE-2026-57687 — WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability (CVSS 8.5)
- CVE-2025-68607 — WordPress Custom Field Template plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-63058 — WordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability (CVSS 4.3)
- CVE-2024-44062 — WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-0653 — Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping (CVSS 4.8)
- CVE-2024-0627 — Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name (CVSS 5.4)
- CVE-2023-6748 — Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure (CVSS 4.3)
- CVE-2023-6745 — Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode (CVSS 5.4)
- CVE-2024-25919 — WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2023-38392 — WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2023-22695 — WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
- CVE-2020-36742 — Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- CVE-2022-4324 — Custom Field Template < 2.5.8 - Admin+ PHP Object Injection (CVSS 7.2)