CVE Catalog
CVE-2026-28005
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.48%
41th percentile - higher than 41% of all known CVEs
Summary
Unauthenticated Privilege Escalation vulnerability in Kadence WooCommerce Email Designer versions up to 1.5.19.
Risk Assessment
An unauthenticated attacker can escalate privileges, potentially leading to unauthorized changes in the WooCommerce store.
Recommendation
Update the Kadence WooCommerce Email Designer plugin to the latest patched version.
Other vulnerabilities in Kadence WooCommerce Email Designer
Original NVD description (English source)
Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS