Kit

Products

ProductCVEsExploitedLatest
Kit (formerly ConvertKit)3–Oct 29, 2026
Kit (formerly ConvertKit) for WooCommerce1–Oct 5, 2026

Exploited and recent CVEs

  • CVE-2026-27063 Medium 5.3 WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-110880 Medium 6.5 WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability 0.2%
  • CVE-2026-105421 Medium 5.3 WordPress Kit (formerly ConvertKit) for WooCommerce plugin <= 2.2.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-65472 Medium 5.3 WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability 0.3%