CVE-2026-32474
Received Received - Intake

Arbitrary File Upload in Templatiq <= 0.2.5

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Patchstack

Description
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-32474
EUVD
EUVD-2026-60908

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack templatiq to 0.2.5 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-434 The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Arbitrary File Upload issue in the WordPress Templatiq Plugin versions 0.2.5 and below. It allows attackers to upload malicious files, such as backdoors, to a website without proper restrictions.

Detection Guidance

Check if the Templatiq plugin version 0.2.5 or below is installed on your WordPress site. Look for unusual file uploads in directories like /wp-content/uploads/. Monitor for unexpected file types or suspicious filenames.

Impact Analysis

Attackers could exploit this to upload harmful files, potentially gaining unauthorized access, compromising website security, or causing further damage like data theft or defacement.

Mitigation Strategies

Disable the Templatiq plugin immediately if installed. Apply Patchstack's mitigation rule if available. Contact your hosting provider or developer for further assistance. Avoid uploading unknown files until the issue is resolved.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-32474. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart