Skip to contentHiroaki Miyashita Custom Field Template vulnerabilities
- hiroaki miyashita custom field templateCustom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' ParameterCVE-2026-129954.3 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' ParameterCVE-2026-98556.5 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerabilityCVE-2026-576878.5 High
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-686076.5 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerabilityCVE-2025-630584.3 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-440626.5 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site ScritpingCVE-2024-06534.4 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Contributor+) Information ExposureCVE-2023-67484.3 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field NameCVE-2024-06276.4 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcodeCVE-2023-67456.4 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-259196.5 Medium
- hiroaki miyashita custom field templateWordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)CVE-2023-383927.1 High
- hiroaki miyashita custom field templateWordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-226954.3 Medium
- hiroaki miyashita custom field templateCustom Field Template <= 2.5.1 - Cross-Site Request Forgery BypassCVE-2020-367424.3 Medium
- hiroaki miyashita custom field templateCustom Field Template < 2.5.8 - Admin+ PHP Object InjectionCVE-2022-4324EPSS 17.7%7.2 High