9.1
Critical
CVE-2025-39557 Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer…
Description
Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer kadence-woocommerce-email-designer allows Upload a Web Shell to a Web Server.This issue affects Kadence WooCommerce Email Designer: from n/a through <= 1.5.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kadence WooCommerce Email Designer 1.5 | earliest → 1.5.14 | No fix stated |
| Kadence WooCommerce Email Designer 1.5 | earliest → 1.5.14 | No fix stated |