Advisories · Technology

hiroaki-miyashita Custom Field Template.

Every CVE that names hiroaki-miyashita Custom Field Template among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12995 CVE record

CVSS 4.3 Medium

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter
- hiroaki-miyashita Custom Field Template
- Broken access control
Not analysed yet 22 Sept 2026
CVE-2026-9855 CVE record

CVSS 6.5 Medium

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter
- hiroaki-miyashita Custom Field Template
- SQL injection
Not analysed yet 19 Sept 2026
CVE-2026-57687 CVE record

CVSS 8.5 High

WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability
- Hiroaki Miyashita Custom Field Template
- SQL injection
Not analysed yet 2 Jul 2026
CVE-2025-68607 CVE record

CVSS 6.5 Medium

WordPress Custom Field Template plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
- Hiroaki Miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 29 Dec 2025
CVE-2025-63058 CVE record

CVSS 4.3 Medium

WordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability
- Hiroaki Miyashita Custom Field Template
- Information disclosure
Not analysed yet 9 Dec 2025
CVE-2024-44062 CVE record

CVSS 6.5 Medium

WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability
- Hiroaki Miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 15 Sept 2024
CVE-2024-0653 CVE record

CVSS 4.4 Medium

Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping
- hiroaki-miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2024
CVE-2023-6748 CVE record

CVSS 4.3 Medium

Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure
- hiroaki-miyashita Custom Field Template
- Broken access control
Not analysed yet 11 Jun 2024
CVE-2024-0627 CVE record

CVSS 6.4 Medium

Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
- hiroaki-miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2024
CVE-2023-6745 CVE record

CVSS 6.4 Medium

Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
- hiroaki-miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 11 Jun 2024
CVE-2024-25919 CVE record

CVSS 6.5 Medium

WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability
- Hiroaki Miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2024
CVE-2023-38392 CVE record

CVSS 7.1 High

WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
- Hiroaki Miyashita Custom Field Template
- Cross-site scripting (XSS)
Not analysed yet 7 Aug 2023
CVE-2023-22695 CVE record

CVSS 4.3 Medium

WordPress Custom Field Template Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
- Hiroaki Miyashita Custom Field Template
- Cross-site request forgery (CSRF)
Not analysed yet 10 Jul 2023
CVE-2020-36742 CVE record

CVSS 4.3 Medium

Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass
- hiroaki-miyashita Custom Field Template
- Cross-site request forgery (CSRF)
Not analysed yet 1 Jul 2023