Approved changes feed: RSS · Atom

cpe:2.3:a:kadencewp:kadence_woocommerce_email_designer:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorKadencewp (edb46f27-778e-5827-8d47-171ae164a149)
ProductKadence Woocommerce Email Designer (cdf1d9b9-6949-58ce-9b94-46269c9213f7)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-47186 vulnerable 2026-06-08 06:14:24.206167 WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versions.
Published: 2023-11-06T11:25:23.860Z
Updated: 2026-04-28T16:08:48.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3335 vulnerable 2026-06-08 05:48:20.565830 Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection
The Kadence WooCommerce Email Designer WordPress plugin before 1.5.7 unserialises the content of an imported file, which could lead to PHP object injections issues when an admin import (intentionally or not) a malicious file and a suitable gadget chain is present on the blog.
Published: 2022-10-25T00:00:00.000Z
Updated: 2025-05-09T19:04:09.994Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.