Access violation vulnerability in ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages 2.4.9

The ConvertKit plugin for WordPress, which helps with email newsletters, marketing, subscribers, and landing pages, has a security vulnerability. This means that someone who is not authorized could change the data and do things like add subscribers to certain tags. This could cause financial problems for website owners if their API (a way for different software to talk to each other) limit is exceeded.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.