CVE-2026-0831 is an arbitrary file write vulnerability in the Templately WordPress plugin (up to version 3.4.8). The issue arises from insufficient input validation in the save_template_to_file() function, where user-supplied parameters such as session_id, content_id, and ai_page_ids are used unsafely to construct file paths. This allows unauthenticated attackers to write arbitrary .ai.json files to locations within the uploads directory, potentially leading to unauthorized file manipulation. The vulnerability is categorized under CWE-863 (Incorrect Authorization) and has a CVSS score of 5.3 (medium severity). No patch or official fix has been documented at this time.

An unauthenticated attacker can write arbitrary files with a .ai.json extension to the uploads directory of a WordPress site running the vulnerable Templately plugin. While this does not directly disclose sensitive information or cause denial of service, it can lead to unauthorized file manipulation which might be leveraged for further attacks depending on the environment. There is no indication of confidentiality or availability impact, and no known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or removing the Templately plugin if possible, or restrict access to the uploads directory via server configuration to mitigate potential exploitation.