CVE Intelligence

Kutethemes KuteShop vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Kutethemes KuteShop: 4 record(s), with affected versions and fixes.

CVE-2026-62115 High · 8.1 CWE-98 Oct 10, 2026
WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62100 High · 7.1 CWE-79 Oct 10, 2026
WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-39612 Medium · 5.3 CWE-862 Apr 8, 2026
WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.
CVE-2026-39611 High · 7.5 CWE-98 Apr 8, 2026
WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through <= 4.2.9.