CVE-2026-19699 — GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to …
Published: 2026-08-20 · CVSS: 2.7 · CVSS 3.1
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7