HI
Vendor
hiroaki-miyashita
12
CVEs
0
On KEV
0
New 30D
Products
CF8.5
Custom Field Template
hiroaki-miyashita
11 CVEs0 on KEV0 new
CP8.8
Custom Post Type Page Template
Hiroaki Miyashita
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-12995 | CF Custom Field Template hiroaki-miyashita | 4.3 | Sep 22 | Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter |
| CVE-2026-9855 | CF Custom Field Template hiroaki-miyashita | 6.5 | Sep 19 | Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter |
| CVE-2026-57687 | CF Custom Field Template Hiroaki Miyashita | 8.5 | Jul 2 | WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability |
| CVE-2025-68607 | CF Custom Field Template Hiroaki Miyashita | 6.5 | Dec 29 | WordPress Custom Field Template plugin <= 2.7.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-63058 | CF Custom Field Template Hiroaki Miyashita | 4.3 | Dec 9 | WordPress Custom Field Template plugin <= 2.7.6 - Sensitive Data Exposure vulnerability |
| CVE-2024-44062 | CF Custom Field Template Hiroaki Miyashita | 5.4 | Sep 15 | WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-0653 | CF Custom Field Template hiroaki-miyashita | 4.8 | Jun 11 | Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping |
| CVE-2023-6748 | CF Custom Field Template hiroaki-miyashita | 4.3 | Jun 11 | Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure |
| CVE-2024-0627 | CF Custom Field Template hiroaki-miyashita | 5.4 | Jun 11 | Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name |
| CVE-2023-6745 | CF Custom Field Template hiroaki-miyashita | 5.4 | Jun 11 | Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode |
| CVE-2024-25919 | CF Custom Field Template Hiroaki Miyashita | 6.5 | Mar 15 | WordPress Custom Field Template plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-50372 | CP Custom Post Type Page Template Hiroaki Miyashita | 8.8 | Dec 18 | WordPress Custom Post Type Page Template Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) |