The Custom Field Template plugin for WordPress contains a security vulnerability that could allow someone to make changes to custom field templates (and other plugin settings). This vulnerability exists in versions up to and including 2.5.8 and is caused by a lack of proper security measures