Lucene search
+L

2 matches found

NVD
NVD
•added 2026/08/20 6:17 a.m.•18 views

CVE-2026-19699

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account...

2.7CVSS0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/20 12:00 a.m.•3 views

CVE-2026-19699: Incorrect Authorization

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account...

2.7CVSS5.8AI score0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder