Skip to content
Sign in
7.5 High

CVE-2023-5454 The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call,…

Description

The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, allowing unauthenticated users to delete arbitrary posts.

Affected products and versions

Product Affected versions Fixed in
Templately 2.2 earliest → < 2.2.6 2.2.6

Other CVEs of Templately

The 2 CVEs of Templately →
CVE-2026-15359 The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers,… 6.5 Medium
Track this CVE