Sensitive Data Exposure in WPDeveloper Templately Plugin
CVE-2025-49408

4.9MEDIUM

Key Information:

Vendor

WordPress
Status
Templately
Vendor
CVE Published:
20 August 2025

What is CVE-2025-49408?

The WPDeveloper Templately plugin is vulnerable to a sensitive data exposure issue that allows for the retrieval of embedded sensitive information. This vulnerability impacts versions from n/a to 3.2.7, posing a risk to users and their data privacy. Organizations utilizing this plugin should take immediate precautions to mitigate potential data breaches and secure sensitive information.

Affected Version(s)

Templately <= 3.2.7

References

https://patchstack.com/database/wordpress/plugin/template...
vdb-entry

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ch4r0n (Patchstack Alliance)
.