Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Kit Clear all filters
TI-2026-82421 CVE-2026-27063 · GHSA-v8mj-3w3m-jr85

Missing authorization in WordPress Kit (formerly ConvertKit) plugin

Priority LOW 29

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00187 Published 2026-10-29 No fix listed CWE-862
TI-2026-76056 CVE-2026-110880 · GHSA-mmhx-mwr8-qg57

Broken access control in Kit (formerly ConvertKit) WordPress plugin

Priority LOW 34

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.6…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00239 Published 2026-10-18 No fix listed CWE-862
TI-2026-67739 CVE-2026-105421 · GHSA-mh22-xwgg-mf44

Missing authorization in Kit (formerly ConvertKit) for WooCommerce

Priority LOW 29

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly Con…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0018 Published 2026-10-05 No fix listed CWE-862