Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:11:54 +0000 CVE-2026-15359 — Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite https://vulnerability.circl.lu/vuln/cve-2026-15359 <p><strong>Affected:</strong> Unknown Templately</p> <p>The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator&#39;s stored cloud service connection with an account under their control, disconnecting the legitimate administrator and redirecting the site&#39;s cloud template library to attacker-controlled content.</p> <p><strong>Affected:</strong> Unknown Templately</p> <p>The Templately WordPress plugin before 3.7.1 does not have an authorisation check on one of its request handlers, allowing unauthenticated attackers to overwrite the administrator&#39;s stored cloud service connection with an account under their control, disconnecting the legitimate administrator and redirecting the site&#39;s cloud template library to attacker-controlled content.</p> https://vulnerability.circl.lu/vuln/cve-2026-15359