Plugin icon

EmailKit – Email Customizer for WooCommerce & WP

emailkit

Vulnerabilities:

5

Last Updated:

May 21, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-05-04
Title
EmailKit < 1.6.6 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter
Fixed in
Fixed in 1.6.6
CVSS
4.9 (medium)
Published
2026-03-20
Title
EmailKit < 1.6.4 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter
Fixed in
Fixed in 1.6.4
CVSS
4.9 (medium)
Published
2026-02-17
Title
EmailKit – Email Customizer for WooCommerce & WP < 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification
Fixed in
Fixed in 1.6.3
CVSS
4.3 (medium)
Published
2026-01-06
Title
EmailKit < 1.6.2 - Authenticated (Author+) Arbitrary File Read via Path Traversal
Fixed in
Fixed in 1.6.2
CVSS
6.5 (medium)
Published
2025-09-26
Title
EmailKit < 1.6.1 - Missing Authorization to Authenticated (Author+) Arbitrary Content Deletion
Fixed in
Fixed in 1.6.1
CVSS
4.3 (medium)