Description
Unauthenticated Broken Access Control in Kit (formerly ConvertKit) <= 3.3.5 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kit | Kit (formerly ConvertKit) | ≤ 3.3.5 | — |
Medium · 5.3
CVE-2026-65472
EUVD-2026-48084GHSA-v6j9-2j4c-j36f
WordPress Kit (formerly ConvertKit) plugin <= 3.3.5 - Broken Access Control vulnerability
Published Jul 23, 2026 · Updated Jul 23, 2026 · Assigned by Patchstack