EE
Product
EmailKit – Email Customizer for WooCommerce & WP
4
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add EmailKit – Email Customizer for WooCommerce & WP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5957 | 6.5 | May 5 | EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter Affected: through 1.6.5 |
| CVE-2025-14059 | 6.5 | Jan 7 | EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal Affected: through 1.6.1 |
| CVE-2026-3474 | 4.9 | Mar 20 | EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter Affected: through 1.6.3 |
| CVE-2026-1925 | 4.3 | Feb 18 | EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification Affected: through 1.6.2 |
Showing 4