Roxnor EmailKit – Email Customizer for WooCommerce & WP

• CVE-2026-5957 Medium 6.5 EmailKit <= 1.6.5 - Authenticated (Author+) Arbitrary File Read via 'emailkit-editor-template' REST Parameter 0.6%
• CVE-2026-3474 Medium 4.9 EmailKit <= 1.6.3 - Authenticated (Administrator+) Path Traversal via 'emailkit-editor-template' REST API Parameter 0.4%
• CVE-2026-1925 Medium 4.3 EmailKit – Email Customizer for WooCommerce & WP <= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification 0.3%
• CVE-2025-14059 Medium 6.5 EmailKit <= 1.6.1 - Authenticated (Author+) Arbitrary File Read via Path Traversal 0.3%