Plugin icon

Custom Field Template

custom-field-template

Vulnerabilities:

14

Last Updated:

June 29, 2026

Active Installs:

30000

Published
Title
Fixed in
CVSS
Published
2026-06-29
Title
Custom Field Template < 2.8 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 2.8
CVSS
4.9 (medium)
Published
2025-12-24
Title
Custom Field Template < 2.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.7.8
CVSS
5.5 (medium)
Published
2025-12-08
Title
Custom Field Template < 2.7.7 - Authenticated (Subscriber+) Information Exposure
Fixed in
Fixed in 2.7.7
CVSS
4.3 (medium)
Published
2024-08-29
Title
Custom Field Template < 2.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.6.6
CVSS
6.4 (medium)
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name
Fixed in
Fixed in 2.6.2
CVSS
6.4 (medium)
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated (Admin+) Stored Cross-Site Scritping
Fixed in
Fixed in 2.6.2
CVSS
4.4 (medium)
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 2.6.2
CVSS
6.4 (medium)
Published
2024-06-10
Title
Custom Field Template < 2.6.2 - Authenticated(Contributor+) Information Exposure
Fixed in
Fixed in 2.6.2
CVSS
4.3 (medium)
Published
2024-02-14
Title
Custom Field Template < 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label
Fixed in
Fixed in 2.6.1
CVSS
6.4 (medium)
Published
2023-07-24
Title
Custom Field Template < 2.6 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.6
CVSS
7.1 (high)
Published
2023-07-10
Title
Custom Field Template < 2.5.9 - Cross-Site Request Forgery
Fixed in
Fixed in 2.5.9
CVSS
4.3 (medium)
Published
2022-12-09
Title
Custom Field Template < 2.5.8 - Admin+ PHP Object Injection
Fixed in
Fixed in 2.5.8
CVSS
3.3 (low)
Published
2020-09-16
Title
Multiple Plugins/Themes - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.5.2
CVSS
5.4 (medium)
Published
2020-09-16
Title
Custom Field Template < 2.5.2 - Cross-Site Request Forgery
Fixed in
Fixed in 2.5.2
CVSS
4.3 (medium)