Plugin icon

Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages

convertkit

Vulnerabilities:

4

Last Updated:

April 27, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2024-06-20
Title
ConvertKit < 2.4.9.1 - Missing Authorization
Fixed in
Fixed in 2.4.9.1
CVSS
5.3 (medium)
Published
2024-04-05
Title
ConvertKit < 2.4.6 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 2.4.6
CVSS
5.3 (medium)
Published
2023-05-15
Title
ConvertKit < 2.2.1 - Reflected XSS
Fixed in
Fixed in 2.2.1
CVSS
7.1 (high)
Published
2022-12-23
Title
ConvertKit < 2.0.5 - Contributor+ Stored XSS
Fixed in
Fixed in 2.0.5
CVSS
6.8 (medium)