medium5.3
CVE-2026-105421
Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access…
Impact
Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.
Affected products
| Product | Affected versions |
|---|---|
| Kit (Formerly ConvertKit) For WooCommerce: From N/A | through 2.2.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.