[■] Plugin de WordPress

Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

8 expedientes en el radar

Comprueba tu versión de Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership Sólo las que se están explotando

[■] Registro

Vulnerabilidades (8)

5,3 Media

CVE-2026-125439: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2026-125439

T−3d 11 nov. 2026
5,3 Media

CVE-2026-27063: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2026-27063

T−15d 29 oct. 2026
5,3 Media

CVE-2026-110880: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2026-110880

T−29d 16 oct. 2026
5,3 Media

CVE-2026-65472: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2026-65472

T−115d 22 jul. 2026
5,3 Media

CVE-2024-3961: falta de autorización en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2024-3961

T−876d 20 jun. 2024
5,3 Media

CVE-2024-31245: exposición de información sensible en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2024-31245

T−953d 5 abr. 2024
6,1 Media

CVE-2023-2337: cross-site scripting (XSS) en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2023-2337

T−1279d 15 may. 2023
6,4 Media

CVE-2022-4508: cross-site scripting (XSS) en Kit (formerly ConvertKit) – Email Subscribers, Email Newsletter, Email Marketing, Landing Pages and Membership

CVE-2022-4508

T−1422d 23 dic. 2022