Kit
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Kit (formerly ConvertKit) | 3 | – | Oct 29, 2026 |
| Kit (formerly ConvertKit) for WooCommerce | 1 | – | Oct 5, 2026 |
Exploited and recent CVEs
- CVE-2026-27063 WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability 0.2%
- CVE-2026-110880 WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-105421 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability 0.2%
- CVE-2026-65472 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability 0.3%