CVE-2026-19699
GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.
| Vendor | unknown |
| Product | gutenkit |
| Published | Aug 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown gutenkit
Be the first to know when new unknown vulnerabilities affecting unknown gutenkit are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / GutenKit
2.4.12 < 2.5.0
References
Credits
Shikhali Jamalzade WPScan