CVE-2026-27063

MEDIUM Status: Deferred

CVSS Scores

CVSS v3.x Base Score

5.3

MEDIUM

Description

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit): from n/a through 3.4.7.

Published

October 29, 2026 3:17 PM

Last Modified

October 29, 2026 3:18 PM

Source

[email protected]

Weaknesses (CWE)

CWE-862

References

https://patchstack.com/database/wordpress/plugin/convertkit/vulnerability/wordpress-kit-formerly-convertkit-plugin-3-4-7-broken-access-control-vulnerability?_s_id=cve

Contact Us

Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.

Send an enquiry

Company *

Name *

Mobile *

Requirement

+91-9229434143 [email protected]