{"id":"CVE-2026-1925","aliases":["EUVD-2026-8060","GHSA-rj4g-w683-5gq4"],"status":"published","title":"EmailKit – Email Customizer for WooCommerce \u0026 WP \u003c= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification","description":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00276,"percentile":0.20173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2026-02-18T04:35:46Z","modified":"2026-06-17T10:16:43Z","products":[{"vendor":"roxnor","product":"emailkit – email customizer for woocommerce \u0026 wp"}],"references":[{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/f131ea1e-d652-4854-abea-6a307ca8118f?source=cve"},{"url":"https://plugins.trac.wordpress.org/browser/emailkit/tags/1.6.2/includes/Admin/EmailKitAjax.php#L150"},{"url":"https://plugins.trac.wordpress.org/browser/emailkit/trunk/includes/Admin/EmailKitAjax.php#L150"},{"url":"https://plugins.trac.wordpress.org/changeset/3456972/emailkit/trunk?contextall=1\u0026old=3419280\u0026old_path=%2Femailkit%2Ftrunk#file1"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1925"},{"url":"https://github.com/advisories/GHSA-rj4g-w683-5gq4"}],"sources":{"cve":[{"id":"CVE-2026-1925","title":"EmailKit – Email Customizer for WooCommerce \u0026 WP \u003c= 1.6.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Title Modification","description":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.","status":"published","published":"2026-02-18T04:35:46.791Z","modified":"2026-04-08T17:32:23.607Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:20:00.879257Z"}],"euvd":[{"id":"EUVD-2026-8060","description":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.","status":"published","published":"2026-02-18T04:35:46Z","modified":"2026-04-08T17:32:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:24:33.901341Z"}],"ghsa":[{"id":"GHSA-rj4g-w683-5gq4","title":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to...","description":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.","status":"published","published":"2026-02-18T06:30:19Z","modified":"2026-02-18T06:30:26Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:06:14.99564Z"}],"nvd":[{"id":"CVE-2026-1925","description":"The EmailKit – Email Customizer for WooCommerce \u0026 WP plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'update_template_data' function in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify the title of any post on the site, including posts, pages, and custom post types.","status":"published","published":"2026-02-18T05:16:28.803Z","modified":"2026-06-17T10:16:43.87Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:12:06.274729Z"}]}}