CVE-2026-28005

CriticalCVSS 9.8

Published: 06/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Unauthenticated Privilege Escalation vulnerability in Kadence WooCommerce Email Designer versions up to 1.5.19.

An unauthenticated attacker can escalate privileges, potentially leading to unauthorized changes in the WooCommerce store.

Update the Kadence WooCommerce Email Designer plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.