CVE-2026-105421

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.

  • Published Oct 5, 2026
  • CVSS 5.3 medium

Affected software

CVE-2026-105421 at the National Vulnerability Database