Read the docs

Hiroaki Miyashita

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Hiroaki Miyashita records in CISA KEV

No Hiroaki Miyashita vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom Field Template 9 records HIGH Custom Post Type Page Template 1 record LOW Lightbox-gallery 1 record HIGH

Records

9 records in Custom Field Template · all components

TI-2022-03960 CVE-2022-4324 · GHSA-482p-fj3c-xcw8

Custom Field Template < 2.5.8 - Admin+ PHP Object Injection

Priority HIGH 67

The Custom Field Template WordPress plugin before 2.5.8 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.17686 Published 2023-01-02 Fixed in 2.5.8
TI-2024-29651 CVE-2024-44062 · GHSA-4jmq-3rrv-cmcc

WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Hiroaki Miyashita Custom Field Template allows Stored XSS.This issue affects Custom Field Template: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00277 Published 2024-09-15 No fix listed CWE-79
TI-2024-00582 CVE-2024-0627 · GHSA-prm3-v4r8-g2mv

Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name

Priority LOW 28

The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom field name column in all versions up to, and including, 2.6.1 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00263 Published 2024-06-11 No fix listed CWE-79
TI-2023-06164 CVE-2023-6745 · GHSA-pwvr-q337-w45r

Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Priority LOW 28

The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cpt' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2024-06-11 No fix listed CWE-79
TI-2024-00603 CVE-2024-0653 · GHSA-3xp5-3hvv-rw8c

Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping

Priority LOW 22

The Custom Field Template plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00247 Published 2024-06-11 No fix listed CWE-79
Open these records in search →