Read the docs

Kit

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Kit records in CISA KEV

No Kit vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-76056 CVE-2026-110880 · GHSA-mmhx-mwr8-qg57

Broken access control in Kit (formerly ConvertKit) WordPress plugin

Priority LOW 34

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.6…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00239 Published 2026-10-18 No fix listed CWE-862
TI-2026-82421 CVE-2026-27063 · GHSA-v8mj-3w3m-jr85

Missing authorization in WordPress Kit (formerly ConvertKit) plugin

Priority LOW 29

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-10-29 No fix listed CWE-862
TI-2026-67739 CVE-2026-105421 · GHSA-mh22-xwgg-mf44

Missing authorization in Kit (formerly ConvertKit) for WooCommerce

Priority LOW 29

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly Con…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0018 Published 2026-10-05 No fix listed CWE-862
Open these records in search →