Convertkit - Email Marketing, Email Newsletter And Landing Pages Security Vulnerabilities and Issues — Convertkit - Email Marketing, Email Newsletter And Landing Pages CVE List

ConvertkitConvertkit - Email Marketing, Email Newsletter And Landing Pages

4 matches found

CVE•added 2024/06/21 3:49 a.m.•93 views

CVE-2024-3961

CVE-2024-3961 affects the ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages WordPress plugin up to version 2.4.9. The vulnerability arises from a missing capability check in the tag_subscriber function, enabling unauthenticated attackers to subscribe users to tags, pot...

5.3CVSS5.5AI score0.00371EPSS

CVE•added 2023/06/05 1:39 p.m.•79 views

CVE-2023-2337

The CVE-2023-2337 issue affects the ConvertKit WordPress plugin prior to version 2.2.1. It is caused by not escaping a parameter before outputting it back in an HTML attribute, resulting in a Reflected Cross-Site Scripting vulnerability that could impact high-privilege users (e.g., admins). Publi...

6.1CVSS6.1AI score0.00458EPSS

Web

CVE•added 2024/04/10 3:52 p.m.•70 views

CVE-2024-31245

CVE-2024-31245 is an unauthenticated Information Exposure vulnerability in ConvertKit (WordPress plugin) affecting versions up to 2.4.5. The issue involves insertion of sensitive information into log files, with confidentiality impact rated High. Exploitation details are not provided in the suppl...

7.5CVSS8.6AI score0.0052EPSS

CVE•added 2023/01/16 3:38 p.m.•48 views

CVE-2022-4508

The vulnerability CVE-2022-4508 affects the ConvertKit WordPress plugin prior to version 2.0.5. The issue is due to insufficient validation and escaping of shortcode attributes, allowing stored XSS from inputs supplied by users with as low as contributor roles, potentially affecting admins. Affec...

5.4CVSS5.4AI score0.00534EPSS