Skip to content
OpenAdvisories

Vendor

kutethemes

22 known vulnerabilities.

Products

Boutique 4 Biolife 4 KuteShop 4 Armania 3 TechOne 3 DukaMarket 2 Uminex 2
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-62098

    WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

    Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

    kutethemes Boutique
  • Medium 5.3
    CVE-2026-39629

    WordPress Uminex theme <= 1.0.9 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.

    kutethemes Uminex
  • Medium 5.3
    CVE-2026-39626

    WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a through <= 1.4.8.

    kutethemes Armania
  • Medium 5.3
    CVE-2026-39624

    WordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.

    kutethemes Biolife
  • Medium 5.3
    CVE-2026-39625

    WordPress TechOne theme <= 3.0.3 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through <= 3.0.3.

    kutethemes TechOne
  • Medium 5.3
    CVE-2026-39628

    WordPress DukaMarket theme <= 1.3.0 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through <= 1.3.0.

    kutethemes DukaMarket
  • Medium 5.3
    CVE-2026-39612

    WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.

    kutethemes KuteShop