Skip to content
Noroxi

EmailKit – Email Customizer for WooCommerce & WP

emailkit · plugin

Known security vulnerabilities for EmailKit – Email Customizer for WooCommerce & WP. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

latest May 5, 2026

Vulnerabilities

  • CVE-2026-5957

    EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter

    Medium 6.5

  • CVE-2025-14059

    EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal

    Medium 6.5

  • CVE-2026-3474

    EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter

    Medium 4.9

  • CVE-2025-60106

    WordPress EmailKit Plugin <= 1.6.0 - Arbitrary Content Deletion Vulnerability

    Medium 4.9

  • CVE-2026-1925

    EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification

    Medium 4.3

← Back to directory