← back
CVE-2024-47308mediumobserved exploitationCWE-862

WordPress Templately plugin <= 3.1.2 - Broken Access Control vulnerability

50Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 6.5epss 1.7%
from disclosure to weapon
Published on NVDNov 1
VulnCheckSep 27
exploitation probability
1.7%top 24% of all CVEs
observed exploitation
yesVulnCheck
Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through <= 3.1.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected products
WPDeveloper · Templately