{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/email-customizer-for-woocommerce-pro--3.9.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wordpress:email_customizer_for_woocommerce:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-81534"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Email Customizer for WooCommerce (Pro) (\u003c= 3.9.5)"],"_cs_severities":["high"],"_cs_tags":["wordpress","rce","vulnerability"],"_cs_type":"advisory","_cs_vendors":["WordPress"],"content_html":"\u003cp\u003eThe Email Customizer for WooCommerce (Pro) plugin for WordPress contains a critical Remote Code Execution vulnerability (CVE-2026-81534) affecting versions up to and including 3.9.5. The vulnerability stems from insufficient authorization and input sanitization within the send_test_mail() function. An authenticated attacker with subscriber-level access or higher can leverage this function to inject arbitrary PHP code, which is then written to executable files within the WordPress uploads directory. Successful exploitation allows for full site compromise, enabling attackers to gain control over the web server environment. This vulnerability is significant due to the low barrier to entry for authenticated subscribers and the potential for complete application takeover.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in full site compromise for WordPress installations using the vulnerable plugin. This allows unauthorized actors to execute arbitrary code, modify application files, access sensitive database information, and potentially pivot to the underlying server infrastructure. All organizations utilizing Email Customizer for WooCommerce (Pro) version 3.9.5 or earlier are at risk.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the Email Customizer for WooCommerce (Pro) plugin to the latest version immediately to remediate CVE-2026-81534.\u003c/li\u003e\n\u003cli\u003eReview the WordPress uploads directory for anomalous PHP files or unauthorized modifications.\u003c/li\u003e\n\u003cli\u003eAudit subscriber-level account activity for unexpected interactions with the Email Customizer plugin functionality.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T08:36:09Z","date_published":"2026-10-15T08:36:09Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-81534/","summary":"An authenticated RCE vulnerability in the Email Customizer for WooCommerce plugin allows subscriber-level users to inject and execute arbitrary PHP code.","title":"Remote Code Execution in Email Customizer for WooCommerce","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-81534/"}],"language":"en","title":"CraftedSignal Threat Feed - Email Customizer for WooCommerce (Pro) (\u003c= 3.9.5)","version":"https://jsonfeed.org/version/1.1"}