Advisories · Technology

Kit (formerly ConvertKit).

Every CVE that names Kit (formerly ConvertKit) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-27063 CVE record

CVSS 5.3 Medium

WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability
- Kit (formerly ConvertKit)
- Broken access control
Not analysed yet 29 Oct 2026
CVE-2026-110880 CVE record

CVSS 6.5 Medium

WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability
- Kit (formerly ConvertKit)
- Broken access control
Not analysed yet 18 Oct 2026
CVE-2026-65472 CVE record

CVSS 5.3 Medium

WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
- Kit (formerly ConvertKit)
- Broken access control
Not analysed yet 23 Jul 2026