PT-2026-2031 · WordPress · Templately

Wpdevteam · CVE-2026-0831 · Published 2026-01-10 · Updated 2026-01-10

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Templately versions prior to 3.4.9

Description The Templately plugin for WordPress is susceptible to an arbitrary file write issue. This is a result of insufficient input validation within the save template to file() function. User-controlled parameters, including session id, content id, and ai page ids, are utilized to create file paths without appropriate sanitization. This allows unauthenticated attackers to write arbitrary .ai.json files to locations within the uploads directory.

Recommendations Update to Templately version 3.4.9 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-0831

Affected Products

Templately

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-0831 · Security Note
• https://twitter.com/VulmonFeeds/status/2009961434000609321 · Twitter Post
• https://plugins.trac.wordpress.org/browser/templately/tags/3.4.5/includes/API/AIContent.php#L38 · Note
• https://twitter.com/CVEnew/status/2009926039774880054 · Twitter Post
• https://t.me/CVEtracker/41941 · Telegram Post
• https://plugins.trac.wordpress.org/changeset/3426051 · Note
• https://plugins.trac.wordpress.org/browser/templately/tags/3.4.5/includes/Core/Importer/Utils/AIUtils.php#L414 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/778242f4-5dfa-4d72-a032-8b5521c5b8ce?source=cve · Note