Known vulnerabilities in StellarWP Kadence WooCommerce Email Designer
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-13387 | The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… | 7.2 High | Dec 2, 2025 |
| CVE-2025-54697 | Incorrect Privilege Assignment vulnerability in StellarWP Kadence WooCommerce Email Designer… | 7.2 High | Aug 14, 2025 |
| CVE-2025-39557 | Unrestricted Upload of File with Dangerous Type vulnerability in StellarWP Kadence WooCommerce Email Designer… | 9.1 Critical | Apr 16, 2025 |
| CVE-2023-47186 | Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer… | 4.3 Medium | Nov 6, 2023 |
Other StellarWP products
GiveWP – Donation Plugin and Fundraising Platform 34
Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 30
The Events Calendar 21
GiveWP 10
Event Tickets and Registration 8
Membership Plugin – Restrict Content 7
LearnDash LMS 7
WPComplete 4
Bookit — Booking & Appointment Calendar 3
Gutenberg Blocks by Kadence Blocks 3
Event Tickets 3
Restrict Content 2