PT-2025-48640
CVE-2025-13387
·
Published
2025-12-01
·
Updated
2026-10-18
Description by
CVSS 3.1
7.2
HighMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Kadence WooCommerce Email Designer versions prior to 1.5.18
Description
The Kadence WooCommerce Email Designer plugin for WordPress is susceptible to Stored Cross-Site Scripting. This occurs because of inadequate input sanitization and output escaping related to the customer name. An unauthenticated attacker can inject malicious web scripts that will execute when a user accesses the affected page.
Recommendations
Update Kadence WooCommerce Email Designer to version 1.5.18 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾