CVE Catalog
CVE-2026-32474
CriticalCVSS 9.9Summary
A user with the Contributor role can upload arbitrary files in Templatiq versions up to 0.2.5.
Risk Assessment
Potential to place malicious files on the server, which could lead to site compromise.
Recommendation
Update the Templatiq plugin to a version newer than 0.2.5.
Original NVD description (English source)
Contributor Arbitrary File Upload in Templatiq <= 0.2.5 versions.