Skip to content
PluginCanary

Custom Field Template

by Hiroaki Miyashita · 30,000+ active installs · Checked 3 Nov 2026
Healthy2 Warnings

Healthy: vulnerability published 21 Sep 2026, fixed in 2.8.

85/ 100 Canary Score
Sub-scores for Custom Field Template
Ownership100
Maintenance100
Security75
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 2.8. Update to version 2.8 or later.21 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 18 Sep 2026, fixed in 2.8. Update to version 2.8 or later.18 Sep 2026Evidence
  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Hiroaki Miyashita4 Sep 2008 to 11 Aug 2026, 408 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
3 months ago
Releases, 24 months
6
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Custom Field Template
Q1 20241
Q2 20244
Q3 20242
Q4 20245
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20262
Q2 20262
Q3 20261
Q4 20260

Last release 11 Aug 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
21 Sep 2026Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter4.3<= 2.7.82.80
18 Sep 2026Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter6.5<= 2.7.82.80
29 Jun 2026Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection6.5<= 2.7.82.80
24 Dec 2025Custom Field Template <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.7.72.7.8113
8 Dec 2025Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure4.3<= 2.7.62.7.746
29 Aug 2024Custom Field Template <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.6.52.6.622
10 Jun 2024Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping4.4<= 2.6.12.6.20
10 Jun 2024Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 2.6.12.6.20
10 Jun 2024Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure4.3<= 2.6.12.6.20
10 Jun 2024Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name6.4<= 2.6.12.6.20
14 Feb 2024Custom Field Template <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label6.4<= 2.62.6.10
24 Jul 2023Custom Field Template <= 2.5.9 - Reflected Cross-Site Scripting6.1<= 2.5.92.6.0n/a
21 Mar 2023Custom Field Template <= 2.5.8 - Cross-Site Request Forgery via Plugin Options Update4.3<= 2.5.82.5.997
9 Dec 2022Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection7.2<= 2.5.72.5.80
16 Sep 2020Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass4.3< 2.5.22.5.20

Source: Wordfence Intelligence.

Reputation

Average rating 5.0 in Q3 2024.

Rating distribution
5 star16
4 star2
3 star0
2 star2
1 star4
Latest low reviews

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Custom Field Template
4 May 2026404
11 May 2026653
18 May 2026694
25 May 2026696
1 Jun 2026579
8 Jun 2026637
15 Jun 2026455
22 Jun 2026384
29 Jun 20265,854
6 Jul 20261,138
13 Jul 2026851
20 Jul 20261,201
27 Jul 2026980
3 Aug 2026657
10 Aug 20265,902
17 Aug 20261,196
24 Aug 2026986
31 Aug 20261,010
7 Sep 2026638
14 Sep 2026673
21 Sep 2026744
28 Sep 2026854
5 Oct 2026702
12 Oct 2026683
19 Oct 20263,539
26 Oct 20261,700
2 Nov 2026183

Weekly downloads over the last 4 weeks are 21% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

ACF Content Analysis for Yoast SEOScore 91 · 100,000+Image Aspect Ratio Crop Field for Advanced Custom FieldsScore 91 · 20,000+Custom Post Types and Custom Fields creator - WCKScore 91 · 10,000+Genesis Custom BlocksScore 91 · 10,000+WPGraphQL for ACFScore 91 · 10,000+

Facts

Version2.8.1
AuthorHiroaki Miyashita
Added4 Sep 2008
Last updated11 Aug 2026
Active installs30,000+
Requires WordPress2.1
Tested up to7.0.8
Requires PHPnot stated
CategoryContent Management > Document Management & Downloads
Tagscft, meta, fields, template, custom fields

Other plugins by this author: WP Favicon Remover, Dashboard Sticky Notes, Max Image Size Control, Barcode QRcode Generator, Payment Gateway PayPay for WooCommerce, Payment Gateway GMOPG for WooCommerce, Plugin Reinstaller, Payment Gateway SMBCGP for WooCommerce, Payment Gateway Zeus for WooCommerce, Donation Link Manager, Payment Gateway Remise for WooCommerce, Plugin Information Card

Questions

Is Custom Field Template still maintained?

Custom Field Template was last updated on 11 Aug 2026. Its Canary status is Healthy.

Is Custom Field Template safe?

Custom Field Template has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Custom Field Template?

The wordpress.org author is Hiroaki Miyashita. Recent committers: Hiroaki Miyashita, plugin-master. We have recorded no ownership change.

What can I use instead of Custom Field Template?

Plugins in the same category with a higher Canary Score: ACF Content Analysis for Yoast SEO, Image Aspect Ratio Crop Field for Advanced Custom Fields, Custom Post Types and Custom Fields creator - WCK, Genesis Custom Blocks, WPGraphQL for ACF.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue