Skip to content
OpenAdvisories

Vendor

kutethemes

22 known vulnerabilities.

kutethemes at a glance

Last 12 months
22
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 9 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 12 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 2026120
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202690
Mar 202610
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

22 results · Feed

  • High 7.1

    WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

  • High 8.1

    WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

  • High 8.1

    WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

  • Medium 6.5

    WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

    Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

  • High 7.1

    WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

  • High 8.1

    WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

  • High 8.1

    WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

  • High 7.1

    WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

  • High 7.1

    WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

  • High 8.1

    WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

  • High 8.1

    WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

  • High 8.1

    WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

  • Medium 5.3

    WordPress Uminex theme <= 1.0.9 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.

  • Medium 5.3

    WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a through <= 1.4.8.

  • Medium 5.3

    WordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.

  • Medium 5.3

    WordPress TechOne theme <= 3.0.3 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through <= 3.0.3.

  • Medium 5.3

    WordPress DukaMarket theme <= 1.3.0 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through <= 1.3.0.

  • High 7.5

    WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion.This issue affects Biolife: from n/a through <= 3.2.3.

  • High 7.5

    WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through <= 2.3.3.

  • Medium 5.3

    WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.

  • High 7.5

    WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through <= 4.2.9.

  • High 7.1

    WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.