VULNERABILITY INTELLIGENCE

CVE-2026-19699

CVSS score2.7 LOW

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-08-20

Last modified2026-08-26

Description

The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoints, allowing users with the Contributor role and above to retrieve mailing-list audience metadata from the site's connected marketing account.