Aller au contenu
Se connecter
7.5 Élevée

CVE-2023-5454 The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call,…

Description

The Templately WordPress plugin before 2.2.6 does not properly authorize the `saved-templates/delete` REST API call, allowing unauthenticated users to delete arbitrary posts.

Produits et versions touchés

Produit Versions touchées Corrigé en
Templately 2.2 premières → < 2.2.6 2.2.6

Autres CVE de Templately

Les 2 CVE de Templately →
CVE-2026-15359 The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers,… 6.5 Moyenne
Suivre cette CVE