Hiroaki Miyashita Custom Field Template
14 CVEs affecting Hiroaki Miyashita Custom Field Template. Latest disclosed: 2026-09-22. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57687 | High | 8.5 | 2026-07-02 | Contributor SQL Injection in Custom Field Template <= 2.7.8 versions. |
CVE-2023-38392 | High | 7.1 | 2023-08-07 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions. |
CVE-2026-9855 | Medium | 6.5 | 2026-09-19 | The Custom Field Template plugin for WordPress is vulnerable to generic SQL Injection via the 'post_ID' parameter in all versions up to, and including, 2.7.8 d… |
CVE-2025-68607 | Medium | 6.5 | 2025-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template custom-field-temp… |
CVE-2024-44062 | Medium | 6.5 | 2024-09-15 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template allows Sto… |
CVE-2024-25919 | Medium | 6.5 | 2024-03-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template allows Stored XSS… |
CVE-2024-0627 | Medium | 6.4 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom field name column in all versions up to, an… |
CVE-2023-6745 | Medium | 6.4 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and includi… |
CVE-2024-0653 | Medium | 4.4 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.1 due… |
CVE-2026-12995 | Medium | 4.3 | 2026-09-22 | The Custom Field Template plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.7.8 via the edit_meta_… |
CVE-2025-63058 | Medium | 4.3 | 2025-12-09 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allow… |
CVE-2023-6748 | Medium | 4.3 | 2024-06-11 | The Custom Field Template plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.1 via the 'cft' shortc… |
CVE-2023-22695 | Medium | 4.3 | 2023-07-10 | Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.8 versions. |
CVE-2020-36742 | Medium | 4.3 | 2023-07-01 | The Custom Field Template plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5.1. This is due to missing or i… |