Known Vulnerabilities for products from Templatesnext

Listed below are 3 of the newest known vulnerabilities associated with the vendor "Templatesnext".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2025-22310 json Not Provided 2025-01-07 2026-04-23
CVE-2023-22712 json Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TemplatesNext TemplatesNext ToolKit plugin <= 3.2.7 v... 5.4 - MEDIUM 2023-03-23 2023-11-07
CVE-2023-0333 json The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them ... 5.4 - MEDIUM 2023-02-13 2023-11-07
CVE-2022-4678 json The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before ... 5.4 - MEDIUM 2023-02-13 2023-11-07