CVE Catalog
CVE-2026-65530
MediumCVSS 4.3Summary
The TemplateSpare plugin for WordPress up to version 4.2.2 contains a Broken Access Control vulnerability exploitable by Subscribers.
Risk Assessment
A Subscriber can gain unauthorized access to administrative functions, potentially leading to modification of settings or data.
Recommendation
Update the TemplateSpare plugin to the latest version that fixes this vulnerability.
Other vulnerabilities in TemplateSpare
Original NVD description (English source)
Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

