Security Advisory

CVE-2026-19699

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 06:00:15

Last updated 2026-08-20 09:38:10

Assigner WPScan

CVSS score 2.7

State PUBLISHED

Description

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.

← Browse all CVEs View on cve.org ↗