Browse CVEs

MEDIUM 5.4 CVE-2024-44062 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template … Custom Field Template 2.6.6+ Fix from $1,6002024-09-15 MEDIUM 5.4 CVE-2023-6745 The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, a… Custom Field Template 2.6.2+ Fix from $1,6002024-06-11 MEDIUM 5.4 CVE-2024-0627 The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom field name column in all versions… Custom Field Template 2.6.2+ Fix from $1,6002024-06-11 HIGH 8.8 CVE-2023-50372 Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects Custom Post Type Page Template… Custom Post Type Page Template after 1.1 Fix from $1,9502023-12-18 MEDIUM 6.1 CVE-2023-38392 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions. Custom Field Template 2.6.0+ Fix from $1,6002023-08-07 HIGH 8.8 CVE-2023-22695 Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.8 versions. Custom Field Template 2.5.9+ Fix from $1,9502023-07-10 MEDIUM 5.4 CVE-2022-4682 The Lightbox Gallery WordPress plugin before 0.9.5 does not validate and escape some of its shortcode attributes before outputting them back in a pag… Lightbox Gallery 0.9.5+ Fix from $1,6002023-02-13 HIGH 7.2 CVE-2022-4324EPSS 18% The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issue… Custom Field Template 2.5.8+ Fix from $1,9502023-01-02