Convertkit - Email Marketing, Email Newsletter And Landing Pages Security Vulnerabilities and Issues — Convertkit - Email Marketing, Email Newsletter And Landing Pages CVE List

Lucene search

ConvertkitConvertkit - Email Marketing, Email Newsletter And Landing Pages

4 matches found

CVE•added 2024/06/21 4:15 a.m.•72 views

CVE-2024-3961

The ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tag_subscriber function in all versions up to, and including, 2.4.9. This makes it possible for unauthen...

5.3CVSS5.5AI score0.00287EPSS

CVE•added 2023/06/05 2:15 p.m.•60 views

CVE-2023-2337

The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6.1CVSS6.1AI score0.00111EPSS

CVE•added 2024/04/10 4:15 p.m.•50 views

CVE-2024-31245

Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5.

7.5CVSS9.3AI score0.00558EPSS

CVE•added 2023/01/16 4:15 p.m.•34 views

CVE-2022-4508

The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high-privilege...

5.4CVSS5.4AI score0.00144EPSS