Convertkit

4 CVEs across 3 Convertkit products. Browse Convertkit vulnerabilities, severities, and proof-of-concept exploits.

Convertkit products with known CVEs

ProductCVEs
Convertkit - Email Marketing\, Email Newsletter And Landing Pages4
Convertkit1
Kit (Formerly Convertkit) – Email Newsletter, Email Marketing, Membership, Subscribers And Landing Pages1
Convertkit CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-3961Medium5.32024-06-21The ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress is vulnerable to unauthorized modification of data due t…
CVE-2024-31245Medium5.32024-04-10Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5.
CVE-2023-2337Medium6.12023-06-05The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting…
CVE-2022-4508Medium5.42023-01-16The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which coul…