CVE-2026-28005

CriticalCVSS 9.8

Published: 06/08/2026(UTC)Updated: 06/08/2026(UTC)Translated: 06/08/2026(UTC)NVD NIST

Summary

Unauthenticated Privilege Escalation vulnerability in Kadence WooCommerce Email Designer versions up to 1.5.19.

An unauthenticated attacker can escalate privileges, potentially leading to unauthorized changes in the WooCommerce store.

Update the Kadence WooCommerce Email Designer plugin to the latest patched version.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.