Custom Field Template

80 Quality Score

Active Installs

20/30

30,000 active installs is modest compared to ACF's 2,000,000 or Meta Box's 500,000, placing it as a niche option in the custom fields space.

Update Freshness

25/25

With a recent update in June 2026 and tested compatibility through WordPress 7.0, the maintenance signals are strong despite the low resolution rate on the single support thread.

User Rating

12/15

An 80 out of 100 rating from 24 reviewers is decent but comes from a small sample, so it is not statistically as reliable as higher-volume competitors.

Support Health

8/15

Only 1 support thread exists and it remains unresolved, which is a minor concern but predictable for a plugin with a tiny footprint.

WP Compatibility

15/15

The plugin runs from WordPress 2.1 through 7.0 and has no stated PHP requirement, giving it unusually broad backward compatibility.

Scores higher than 76% of indexed plugins

About

The Custom Field Template plugin extends the functionality of custom fields.

Active Installs 30k+

Rating ★★★★ 4/5

Last Updated 2026-08-11 7:28am GMT

Requires WordPress 2.1+

Tested Up To 7.0.4

Security History

15 known vulnerabilities, all patched

1 High 14 Medium

Most recent: September 21, 2026

View details ▸

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) Insecure Direct Object Reference to Arbitrary Media File Deletion via 'file_field' Parameter Medium

September 21, 2026 Patched in ["2.8"] CVE-2026-12995

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection via 'post_ID' Parameter Medium

September 18, 2026 Patched in ["2.8"] CVE-2026-9855

Custom Field Template <= 2.7.8 - Authenticated (Contributor+) SQL Injection Medium

June 29, 2026 Patched in ["2.8"] CVE-2026-57687

Custom Field Template <= 2.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 24, 2025 Patched in ["2.7.8"] CVE-2025-68607

Custom Field Template <= 2.7.6 - Authenticated (Subscriber+) Information Exposure Medium

December 8, 2025 Patched in ["2.7.7"] CVE-2025-63058

Custom Field Template <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 29, 2024 Patched in ["2.6.6"] CVE-2024-44062

Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode Medium

June 10, 2024 Patched in ["2.6.2"] CVE-2023-6745

Custom Field Template <= 2.6.1 - Authenticated(Constibutor+) Stored Cross-Site Scripting via Custom Field Name Medium

June 10, 2024 Patched in ["2.6.2"] CVE-2024-0627

Custom Field Template <= 2.6.1 - Authenticated(Contributor+) Information Exposure Medium

June 10, 2024 Patched in ["2.6.2"] CVE-2023-6748

Custom Field Template <= 2.6.1 - Authenticated (Admin+) Stored Cross-Site Scritping Medium

June 10, 2024 Patched in ["2.6.2"] CVE-2024-0653

Custom Field Template <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via $search_label Medium

February 14, 2024 Patched in ["2.6.1"] CVE-2024-25919

Custom Field Template <= 2.5.9 - Reflected Cross-Site Scripting Medium

July 24, 2023 Patched in ["2.6.0"] CVE-2023-38392

Custom Field Template <= 2.5.8 - Cross-Site Request Forgery via Plugin Options Update Medium

March 21, 2023 Patched in ["2.5.9"] CVE-2023-22695

Custom Field Template <= 2.5.7 - Authenticated (Administrator+) PHP Object Injection High

December 9, 2022 Patched in ["2.5.8"] CVE-2022-4324

Custom Field Template <= 2.5.1 - Cross-Site Request Forgery Bypass Medium

September 16, 2020 Patched in ["2.5.2"] CVE-2020-36742

What It Does

Custom Field Template lets WordPress administrators define custom meta fields for posts, pages, and custom post types through a template-based interface. It extends the default custom fields box so you can create structured inputs (text, selects, dates, images) and standardize how editors enter data across your site.

Who It's For

This plugin fits developers and site builders working on legacy WordPress installations (back to 2.1) who need a lightweight, template-driven way to add repeated meta fields without the learning curve of larger frameworks. It is a reasonable fit for the niche use cases listed, especially property listings and product catalogs, where consistent data entry matters.

Who Should Skip It

If you are building a new site or need a polished admin UI, repeatable fields, conditional logic, or a large extension ecosystem, skip this plugin in favour of Advanced Custom Fields or Meta Box, which dominate the category.

The Bottom Line

Custom Field Template is a competent, lightweight meta box tool with solid maintenance and broad compatibility, but its tiny install base, tiny support footprint, and lack of modern features keep it a secondary choice. It earns a 79.55/100 on PluginCheck, which places it firmly below the top alternatives in the same category.

Related Plugins

Advanced Custom Fields (ACF®) 94/100

Pick ACF when you want the largest ecosystem, block editor integration, and a battle-tested UI with 2 million installs behind it.

Meta Box 87/100

Pick Meta Box when you need premium-style features such as custom tables, conditional logic, and a deep extension library without paying for a license.

Checkout Field Editor (Checkout Manager) for WooCommerce 87/100

Pick this checkout-focused alternative only when your custom field needs are limited to WooCommerce checkout, billing, and shipping screens.

CMB2 87/100

Pick CMB2 when you are a developer who prefers defining fields in PHP and wants strong integration with custom post types from code.

Pods – Custom Content Types and Fields 86/100

Pick Pods when you need to create entire custom content types and relationships, not just meta fields on existing post types.