Kadence WooCommerce Email Designer vulnerabilities

3 known vulnerabilities in Kadence WooCommerce Email Designer from StellarWP. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Kadence WooCommerce Email Designer: Improper Neutralization of Input During Web Page Generation

  CVE-2025-13387Dec 2, 2025StellarWP

  The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.5.17 due to insufficient input sanitization and output escaping. This makes it possible for u

• 7.2 High severity

  Kadence WooCommerce Email Designer: Incorrect Privilege Assignment

  CVE-2025-54697Aug 14, 2025StellarWP

  Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Privilege Escalation.This issue affects Kadence WooCommerce Email Designer: from n/a through <= 1.5.16.

• 9.1 Critical severity

  Kadence WooCommerce Email Designer: Unrestricted Upload of File with Dangerous Type

  CVE-2025-39557Apr 16, 2025StellarWP

  Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Upload a Web Shell to a Web Server.This issue affects Kadence WooCommerce Email Designer: from n/a through <