Skip to content
OpenAdvisories

Vendor

kutethemes

22 known vulnerabilities.

Products

Boutique 4 Biolife 4 KuteShop 4 Armania 3 TechOne 3 DukaMarket 2 Uminex 2
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.1
    CVE-2026-62100

    WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

    kutethemes KuteShop
  • High 8.1
    CVE-2026-62115

    WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

    kutethemes KuteShop
  • High 8.1
    CVE-2026-62099

    WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

    kutethemes Boutique
  • High 7.1
    CVE-2026-62095

    WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

    kutethemes Biolife
  • High 8.1
    CVE-2026-62096

    WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

    kutethemes Biolife
  • High 8.1
    CVE-2026-62094

    WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

    kutethemes TechOne
  • High 7.1
    CVE-2026-62093

    WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

    kutethemes TechOne
  • High 7.1
    CVE-2026-62091

    WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

    kutethemes Armania
  • High 8.1
    CVE-2026-62092

    WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

    kutethemes Armania
  • High 8.1
    CVE-2026-48194

    WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

    kutethemes DukaMarket
  • High 8.1
    CVE-2026-48193

    WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

    kutethemes Uminex
  • High 7.5
    CVE-2026-39623

    WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion.This issue affects Biolife: from n/a through <= 3.2.3.

    kutethemes Biolife
  • High 7.5
    CVE-2026-39613

    WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through <= 2.3.3.

    kutethemes Boutique
  • High 7.5
    CVE-2026-39611

    WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through <= 4.2.9.

    kutethemes KuteShop
  • High 7.1
    CVE-2026-25342

    WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.

    kutethemes Boutique