CVE-2026-28005

The vulnerability allows unauthenticated users to escalate privileges in Kadence WooCommerce Email Designer versions up to 1.5.19, potentially enabling unauthorized access to sensitive functionalities. This critical flaw, rated 9.8 on the CVSS scale, poses a significant risk to e-commerce sites using the affected plugin. Organizations utilizing this plugin should prioritize immediate updates or mitigation strategies to safeguard against potential exploitation.