PT-2026-35374 · Wpdeveloper · Templately

Ananda Dhakal · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-42379

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Templately versions prior to 3.6.2

Description An issue in WPDeveloper Templately involves the insertion of sensitive information into sent data, which allows for the retrieval of embedded sensitive data.

Recommendations Update to a version newer than 3.6.1.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-42379

Affected Products

Templately

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-42379 · Security Note
• https://patchstack.com/database/wordpress/plugin/templately/vulnerability/wordpress-templately-plugin-3-6-1-sensitive-data-exposure-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2048852232292971001 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2048722368965628414 · Twitter Post
• https://t.me/CVEtracker/51916 · Telegram Post