A vulnerability, which was classified as critical, has been found in TemplateSpare Plugin up to 4.2.0 on WordPress. This affects an unknown part. Performing a manipulation results in unrestricted upload.
This vulnerability is reported as CVE-2026-57658. The attack is possible to be carried out remotely. No exploit exists.
