CVE-2026-94677

The vulnerability in Kadence WooCommerce Email Designer versions up to 1.5.19.1 allows for PHP Object Injection, which could enable an attacker to execute arbitrary code on the server. This poses a significant risk to any e-commerce platform utilizing the affected plugin, potentially compromising sensitive customer data and the integrity of the application. E-commerce site administrators and developers using this plugin should prioritize immediate updates to mitigate this high-severity risk.