CVE-2025-26917

Summary

CVE-2025-26917 is a Cross-site Scripting (XSS) vulnerability affecting the WP Templata plugin for WordPress. The issue resides in the plugin's improper neutralization of user input during web page generation. An attacker can exploit this vulnerability to inject malicious scripts into a targeted website. Successful exploitation allows the attacker to steal user data, perform unauthorized actions, or launch further attacks. This vulnerability exists in WP Templata versions from n/a through 1.0.7. Users are advised to update their plugins to the latest, secure version to prevent potential XSS attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.