Lucene search
+L

45 matches found

NVD
NVD
•added 2026/09/30 1:17 p.m.•7 views

CVE-2026-94677

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/30 12:27 p.m.•36 views

CVE-2026-94677 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS0.00399EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/30 12:27 p.m.•15 views

CVE-2026-94677

The Kadence WooCommerce Email Designer plugin for WordPress, versions

7.2CVSS5.8AI score0.00399EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/30 12:27 p.m.•6 views

EUVD-2026-89849

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS5.8AI score0.00399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/30 12:27 p.m.•6 views

CVE-2026-94677 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS5.8AI score0.00399EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•8 views

CVE-2026-94677: Deserialization of Untrusted Data

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS5.8AI score0.00399EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/30 12:00 a.m.•3 views

PT-2026-103181

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

7.2CVSS5.8AI score0.00399EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/09/24 10:01 a.m.•15 views

WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Kadence WooCommerce Email Designer versions = 1.5.19.1...

7.2CVSS5.9AI score0.00399EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/08/06 3:16 p.m.•15 views

CVE-2026-28005

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...

9.8CVSS0.00483EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/06 2:27 p.m.•17 views

EUVD-2026-53939

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•2 views

CVE-2026-28005: Missing Authorization

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer = 1.5.19 versions...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•5 views

PT-2026-68503

Name of the Vulnerable Software and Affected Versions Kadence WooCommerce Email Designer versions prior to 1.5.20 Description The Kadence WooCommerce Email Designer plugin for WordPress allows unauthenticated attackers to elevate their privileges. Recommendations Update Kadence WooCommerce Email...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References4
CVE
CVE
•added 2025/12/02 4:37 a.m.•38 views

CVE-2025-13387

CVE-2025-13387 affects Kadence WooCommerce Email Designer for WordPress. The WordPress plugin is vulnerable to unauthenticated stored cross-site scripting via the customer name in all versions up to 1.5.17 due to insufficient input sanitization and output escaping. Several connected sources confi...

7.2CVSS6.1AI score0.00298EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/02 4:37 a.m.•10 views

CVE-2025-13387 Kadence WooCommerce Email Designer <= 1.5.17 - Unauthenticated Stored Cross-Site Scripting

The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.5.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6.1AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/02 12:00 a.m.•2 views

CVE-2025-13387: Improper Neutralization of Input During Web Page Generation

The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, 1.5.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

7.2CVSS6AI score0.00298EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2025-11308

Malicious code in bioql PyPI...

9.1CVSS9.2AI score0.00609EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2022-42722

Malicious code in bioql PyPI...

7.2CVSS6.9AI score0.01267EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/08/16 11:25 a.m.•16 views

CVE-2025-54697

Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Privilege Escalation.This issue affects Kadence WooCommerce Email Designer: from n/a through = 1.5.16...

7.2CVSS5.9AI score0.00403EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•9 views

WordPress plugin Kadence WooCommerce Email Designer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

7.2CVSS6.8AI score0.00403EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•5 views

CVE-2025-54697: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Privilege Escalation.This issue affects Kadence WooCommerce Email Designer: from n/a through = 1.5.16...

7.2CVSS5.8AI score0.00403EPSS
SaveExploits0References1
Rows per page
Query Builder