CVE-2025-49408

Severity

CRITICAL

CVSS

10.0

EPSS

0.00493

Risk score

40.17

CISA KEV

PoC

Published

2025-08-20

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2025-28302, GHSA-9GC8-9PMH-4936

Products

WPDeveloper:Templately n/a ≤3.2.7

Sources

euvd EUVD-2025-28302

Description

Insertion of Sensitive Information Into Sent Data vulnerability in WPDeveloper Templately allows Retrieve Embedded Sensitive Data. This issue affects Templately: from n/a through 3.2.7.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-28302
https://patchstack.com/database/wordpress/plugin/templately/vulnerability/wordpress-templately-plugin-3-2-7-sensitive-data-exposure-vulnerability?_s_id=cve