CVE Intelligence

Kit Kit (formerly ConvertKit) for WooCommerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kit Kit (formerly ConvertKit) for WooCommerce: 1 record(s), with affected versions and fixes.

CVE-2026-105421 Medium · 5.3 CWE-862 Oct 5, 2026
WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.