TemplatesNext ToolKit

TemplatesNext ToolKit has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 5 of the records (100%).

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all TemplatesNext ToolKit vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-13559

TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

5 records


2025-02-28 15:27	TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode TemplatesNext ToolKit <= 3.2.9	`CVE-2024-13559`	6.4 Medium	Krzysztof Zając	No
2025-01-06 00:00	TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting TemplatesNext ToolKit <= 3.2.9	`CVE-2025-22310`	6.4 Medium	LVT-tholv2k	No
2023-01-18 00:00	TemplatesNext ToolKit <= 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode TemplatesNext ToolKit <= 3.2.8	`CVE-2023-0333`	6.4 Medium	WPScanTeam	Yes
2023-01-17 00:00	TemplatesNext ToolKit <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode TemplatesNext ToolKit <= 3.2.7	`CVE-2022-4678`	6.4 Medium	István Márton	Yes
2023-01-17 00:00	TemplatesNext ToolKit <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting TemplatesNext ToolKit <= 3.2.7	`CVE-2023-22712`	6.4 Medium	Rafshanzani Suhada	Yes

Showing 1–5 of 5 reports