What’s Vulnerable › Products

roxnor EmailKit – Email Customizer for WooCommerce & WP vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your roxnor EmailKit – Email Customizer for WooCommerce & WP version is affected

Latest roxnor EmailKit – Email Customizer for WooCommerce & WP vulnerabilities

• CVE-2026-5957 — EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter (CVSS 6.5)
• CVE-2026-3474 — EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter (CVSS 4.9)
• CVE-2026-1925 — EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification (CVSS 4.3)
• CVE-2025-14059 — EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal (CVSS 6.5)