Approved changes feed: RSS · Atom

cpe:2.3:a:hiroaki_miyashita:custom_field_template:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHiroaki Miyashita (679b9f8b-aeef-530d-8d05-2006b34a54f5)
ProductCustom Field Template (8217f8a0-45fc-5052-83d4-6a75115a8493)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57687 vulnerable 2026-07-29 01:03:15.991597 WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability
HIGH (8.5)
Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.
Published: 2026-07-02T11:15:43.062Z
Updated: 2026-07-02T19:39:57.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68607 vulnerable 2026-06-08 07:41:21.446341 WordPress Custom Field Template plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allows Stored XSS.This issue affects Custom Field Template: from n/a through <= 2.7.7.
Published: 2025-12-29T21:10:50.618Z
Updated: 2026-04-28T16:14:31.270Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63058 vulnerable 2026-06-08 07:39:17.236412 WordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability
MEDIUM (4.3)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allows Retrieve Embedded Sensitive Data.This issue affects Custom Field Template: from n/a through <= 2.7.6.
Published: 2025-12-09T14:52:33.266Z
Updated: 2026-04-28T16:14:09.643Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44062 vulnerable 2026-06-08 06:45:53.527099 WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template allows Stored XSS.This issue affects Custom Field Template: from n/a through 2.6.5.
Published: 2024-09-15T07:58:38.523Z
Updated: 2026-04-28T16:10:17.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25919 vulnerable 2026-06-08 06:31:23.997787 WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template allows Stored XSS.This issue affects Custom Field Template: from n/a through 2.6.
Published: 2024-03-15T13:03:03.344Z
Updated: 2026-04-28T16:09:13.448Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38392 vulnerable 2026-06-08 06:08:17.803137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22695 vulnerable 2026-06-08 05:54:26.911636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.