Threat Entry Updated 2026-03-23

CVE-2026-3474 - EmailKit – Email Customizer for WooCommerce & WP Plugin

The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3. This is due to the action() function in the TemplateData class passing user-supplied input from the 'emailkit-editor-template' REST API parameter directly to file_get_contents() without any path validation, sanitization, or restriction to an allowed directory. This makes it possible for authenticated attackers, with Administrator-level access, to read arbitrary files on the server (such as /etc/passwd or wp-config.php) by supplying a traversal path.…

PLUGIN EmailKit – Email Customizer for WooCommerce & WP

CVE-2026-3474

MEDIUM CVSS 4.9 2026-03-21

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-04-15

CVE-2026-1925 - EmailKit – Email Customizer for WooCommerce & WP Plugin

The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.

PLUGIN EmailKit – Email Customizer for WooCommerce & WP

CVE-2026-1925

MEDIUM CVSS 4.3 2026-02-18

Risk Score

Open Full Technical Breakdown