CVE-2024-31245

HIGH 7.5CVE-2024-31245 · Published 10/04/2024 · updated 12/08/2026

In short

CVE-2024-31245 is a HIGH (CVSS 7.5) vulnerability affecting convertkit - email marketing, email newsletter and landing pages (convertkit).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 44.6% of all vulnerabilities.
Fix: update to 2.4.6 or later.

Package	Affected versions	Patched versions
convertkit - email marketing, email newsletter and landing pages convertkit	`< 2.4.6`	`2.4.6`

Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a through 2.4.5.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.