High · 8.5 CVE-2026-57687 EUVD-2026-41296GHSA-3jm7-hr4j-gx2m

WordPress Custom Field Template plugin <= 2.7.8 - SQL Injection vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack

Vendor: hiroaki-miyashita Product: Custom Field Template

Description

Contributor SQL Injection in Custom Field Template <= 2.7.8 versions.

Affected products

Vendor	Product	Affected	Fixed
Hiroaki Miyashita	Custom Field Template	≤ 2.7.8	—

References

https://patchstack.com/database/wordpress/plugin/custom-field-template/vulnerability/wordpress-custom-field-template-plugin-2-7-8-sql-injection-vulnerability?_s_id=cve vdb-entry