Is CVE-2026-105421 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-105421?

CVE-2026-105421 has a CVSS v3 severity of MEDIUM (5.3).

Back

CVE-2026-105421

Description

Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (formerly ConvertKit) for WooCommerce: from n/a through 2.2.0.