Templatespare Vulnerabilities

The TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 4.2.2. This makes it possible for authenticated attackers...

CVSS:

4.3

Affected:

up to 4.2.2

Fix:

No patched version reported

Disclosed:

Jul 23, 2026

CVE-2026-65530 on NVD →

The TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 4.2.0. This makes it possible for authenticated attackers, wit...

CVSS:

7.2

Affected:

up to 4.2.0

Fixed in:

4.2.1

Disclosed:

Jun 25, 2026

CVE-2026-57658 on NVD →

The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor & Gutenberg Blocks! – TemplateSpare plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'templatespare_activate_required_theme' a...

CVSS:

4.3

Affected:

up to 2.4.2

Fixed in:

2.4.3

Disclosed:

Aug 2, 2024

CVE-2024-6872 on NVD →