MEDIUM 6.5 NVD

CVE-2026-15359

The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwri

The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator's stored cloud service connection with an account under their control, disconnecting the legitimate administrator and redirecting the site's cloud template library to attacker-controlled content.

References

https://wpscan.com/vulnerability/d4749a25-f3fa-4908-9532-3ae7c1c38a58/

Published: 2026-08-07 · Source: NVD · Feed updated: 2026-08-10

This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-08-07 via NVD.

vulnfeed aggregates 8893 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.