Critical · 9.8 CVE-2026-28005 EUVD-2026-53939GHSA-x6xp-4xjv-q7c6

WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19 - Privilege Escalation vulnerability

Published Aug 6, 2026 · Updated Aug 6, 2026 · Assigned by Patchstack

Vendor: Nexcess Product: Kadence WooCommerce Email Designer Category: Web / CMS

Description

Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.

Affected products

Vendor	Product	Affected	Fixed
Nexcess	Kadence WooCommerce Email Designer	≤ 1.5.19	—

References

https://patchstack.com/database/wordpress/plugin/kadence-woocommerce-email-designer/vulnerability/wordpress-kadence-woocommerce-email-designer-plugin-1-5-19-privilege-escalation-vulnerability?_s_id=cve vdb-entry