CVE-2026-15359

The CVE concerns the Templately WordPress plugin prior to 3.7.1, which lacks an authorization check on a specific request handler. This allows unauthenticated attackers to overwrite the administrator’s stored cloud service connection, giving the attacker control over that connection, disconnectin...