KF
Product
Kit (formerly ConvertKit)
by Kit · last CVE Oct 29, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 3Low 0
Watch

Add Kit (formerly ConvertKit) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-110880
6.5
0%
Oct 18
WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability
Affected: through 3.4.6
CVE-2026-27063
New
5.3–Oct 29
WordPress Kit (formerly ConvertKit) plugin <= 3.4.7 - Broken Access Control vulnerability
Affected: through 3.4.7
CVE-2026-65472
5.3
0%
Jul 23
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Affected: through 3.3.5
Showing 3