The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 20 Aug 2026 06:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account. | |
| Title | GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published:
Updated: 2026-08-20T06:00:15.938Z
Reserved: 2026-08-13T07:59:58.109Z
Link: CVE-2026-19699
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-08-20T06:17:13.167
Modified: 2026-08-20T06:17:13.167
Link: CVE-2026-19699
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses
No weakness.