CVE-2026-12995 | Custom Field Template Plugin up to 2.7.8 on WordPress edit_meta_value file-field resource injection

September 22, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Custom Field Template Plugin up to 2.7.8 on WordPress. This issue affects the function edit_meta_value. Such manipulation of the argument file-field leads to improper control of resource identifiers.

This vulnerability is listed as CVE-2026-12995. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More