Templately

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Templately records in CISA KEV

No Templately vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Templately 2 records HIGH

Records

2 records in Templately · all components

TI-2023-05019 CVE-2023-5454 · GHSA-83w6-ppfq-rfhf

Templately < 2.2.6 - Arbitrary post trashing via Missing Authorization

HIGH 66

The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, allowing unauthenticated users to delete arbitrary posts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00735 Published 2023-11-06 Fixed in 2.2.6 CWE-862

TI-2024-31626 CVE-2024-47308 · GHSA-c6x9-2wm7-rmpp

WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

MEDIUM 52

Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01744 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0