Kadence WooCommerce Email Designer

Kadence WooCommerce Email Designer has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 6 are fixed as of September 2026. Their average CVSS score is 7.1, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 4 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (17%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

Every one of the 6 issues recorded for Kadence WooCommerce Email Designer has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. Kadence WooCommerce Email Designer is installed on roughly 90,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.1/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all Kadence WooCommerce Email Designer vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-28005

Kadence WooCommerce Email Designer <= 1.5.19 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

6 records
Kadence WooCommerce Email Designer banner
Latestv1.5.19.1

Kadence WooCommerce Email Designer

Nexcess

Author

Nexcess

4.5(142)
90/100
Last Updated
2026-07-29 (2mo ago)
Active Installs
90,000+
Downloads
2,273,431
Requires WP
5.3+
Requires PHP
5.2.4+
Tested up to
WP 7.0.4
Created
2018-05-29 (8y ago)

This plugin lets you easily customize the default transactional WooCommerce email templates. Edit the design using the native WordPress customizer for instant visual edits. Customize the text (including body text) or each email template in WooCommerce without editing code. Features Include Live preview your WooCommerce emails. Import pre-built email designs to get started. Customize emails to match your brand style. Customize heading, subtitle, and body Text Send test emails for real email inbox testing. Export and import your settings with ease. Don’t send bland emails Make an impression with your customers and represent your brand well by customizing your WooCommerce emails design and content with Kadence WooCommerce Email Designer. Full Video Walkthrough Watch video walkthrough here. Support We are happy to help as best we can with questions! Please use the support forums. Credits Thanks to RightPress, we heavily pulled code and structure for this plugin from Decorator – WooCommerce Email Customizer by RightPress. Thanks to The Beaver Builder Team, we adapted our import/export control functionality from Customizer Export/Import Thanks to cristian-ungureanu, we adapted our footer social media control functionality from Customizer Repeater Thanks to soderlind, we adapted our range control functionality from WordPress Customizer Range Value Control Thanks to soderlind, we adapted our toggle control functionality from WordPress Customizer Toggle Control Security Policy Reporting Security Bugs Please report security bugs found in the Kadence WooCommerce Email Designer plugin’s source code through the Patchstack Vulnerability Disclosure Program https://patchstack.com/database/vdp/kadence-woocommerce-email-designer. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C