WPDeveloper Templately vulnerabilities

Latest WPDeveloper Templately CVEs

Newest publication first

1. CVE-2026-66667 WordPress Templately plugin <= 3.7.1 - Cross Site Scripting (XSS) vulnerability

   Published 2026-08-18

   High·CVSS 7.1

   Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.

2. CVE-2026-42379 WordPress Templately plugin <= 3.6.1 - Sensitive Data Exposure vulnerability

   Published 2026-04-27

   High·CVSS 7.7

   Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data.This issue affects Templately: from n/a through 3.6.1.

3. CVE-2025-49408 WordPress Templately Plugin <= 3.2.7 - Sensitive Data Exposure Vulnerability

   Published 2025-08-20

   Critical·CVSS 10.0

   Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data. This issue affects Templately: from n/a through 3.2.7.

4. CVE-2024-47308 WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

   Published 2024-11-01

   Medium·CVSS 6.5

   Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.