CVE-2025-14059 | EmailKit Plugin up to 1.6.1 on WordPress REST API Endpoint create_template path traversal

A vulnerability was found in EmailKit Plugin up to 1.6.1 on WordPress. It has been rated as critical. This impacts the function create_template of the component REST API Endpoint. The manipulation leads to path traversal.

This vulnerability is traded as CVE-2025-14059. It is possible to initiate the attack remotely. There is no exploit available.