WordPress plugin
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium8
- Low0
All Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch ≤3.7.1Update to 3.7.2 | CVE-2026-18438 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤3.7.1Update to 3.7.2 | CVE-2026-66667 | |
| Medium5.3 | Missing Authorization ≤3.7.0Update to 3.7.1 | CVE-2026-15359 | |
| Medium4.3 | Authenticated (Contributor+) Information Exposure ≤3.6.1Update to 3.6.2 | CVE-2026-42379 | |
| Medium5.3 | Unauthenticated Limited Arbitrary JSON File Write ≤3.4.8Update to 3.4.9 | CVE-2026-0831 | |
| Medium4.3 | Authenticated (Author+) Information Disclosure ≤3.2.7Update to 3.2.8 | CVE-2025-49408 | |
| Medium4.3 | Missing Authorization ≤3.1.5Update to 3.1.6 | CVE-2024-50423 | |
| Medium6.3 | Missing Authorization via AJAX actions ≤3.1.5Update to 3.1.6 | CVE-2024-50424 | |
| Medium5.3 | Missing Authorization ≤3.1.2Update to 3.1.3 | CVE-2024-47308 | |
| Medium6.5 | Improper Authorization to Arbitrary Post Deletion ≤2.2.5Update to 2.2.6 | CVE-2023-5454 |
- High8.8Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch
≤3.7.1Update to 3.7.2
- High7.2Unauthenticated Stored Cross-Site Scripting
≤3.7.1Update to 3.7.2
- Medium5.3Missing Authorization
≤3.7.0Update to 3.7.1
- Medium4.3Authenticated (Contributor+) Information Exposure
≤3.6.1Update to 3.6.2
- Medium5.3Unauthenticated Limited Arbitrary JSON File Write
≤3.4.8Update to 3.4.9
- Medium4.3Authenticated (Author+) Information Disclosure
≤3.2.7Update to 3.2.8
- Medium4.3Missing Authorization
≤3.1.5Update to 3.1.6
- Medium6.3Missing Authorization via AJAX actions
≤3.1.5Update to 3.1.6
- Medium5.3Missing Authorization
≤3.1.2Update to 3.1.3
- Medium6.5Improper Authorization to Arbitrary Post Deletion
≤2.2.5Update to 2.2.6
Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!: common questions
Does Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! have known vulnerabilities?
Yes. VulnCrest Radar lists 10 known vulnerabilities in Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud!: 2 high, 8 medium. None are known to affect version null.
How do I check which version of Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! vulnerability?
CVE-2026-18438, published Aug 14, 2026: Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch. Severity: High (CVSS 8.8).
Is any Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! vulnerability listed in CISA KEV?
No. None of the known Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! vulnerabilities is currently listed in the CISA KEV catalog.