CVE Intelligence

Vulnerabilidades de Kutethemes

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Kutethemes: 22 registro(s), com severidade, exploração e correções.

KuteShop 4Biolife 4Boutique 4TechOne 3Armania 3Uminex 2DukaMarket 2

Somente exploradas (KEV) →

CVE-2026-62115 Alta · 8.1 CWE-98 10/10/2026
WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62100 Alta · 7.1 CWE-79 10/10/2026
WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-62099 Alta · 8.1 CWE-98 10/10/2026
WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62098 Média · 6.5 CWE-94 10/10/2026
WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
CVE-2026-62096 Alta · 8.1 CWE-98 10/10/2026
WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62095 Alta · 7.1 CWE-79 10/10/2026
WordPress Biolife theme <= 3.2.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
CVE-2026-62094 Alta · 8.1 CWE-98 10/10/2026
WordPress TechOne theme <= 3.0.3 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62093 Alta · 7.1 CWE-79 10/10/2026
WordPress TechOne theme <= 3.0.3 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
CVE-2026-62092 Alta · 8.1 CWE-98 10/10/2026
WordPress Armania theme <= 1.4.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62091 Alta · 7.1 CWE-79 10/10/2026
WordPress Armania theme <= 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
CVE-2026-48194 Alta · 8.1 CWE-98 10/10/2026
WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48193 Alta · 8.1 CWE-98 10/10/2026
WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
CVE-2026-39629 Média · 5.3 CWE-80 08/04/2026
WordPress Uminex theme <= 1.0.9 - Arbitrary Shortcode Execution vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.
CVE-2026-39628 Média · 5.3 CWE-80 08/04/2026
WordPress DukaMarket theme <= 1.3.0 - Arbitrary Shortcode Execution vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through <= 1.3.0.
CVE-2026-39626 Média · 5.3 CWE-80 08/04/2026
WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a through <= 1.4.8.
CVE-2026-39625 Média · 5.3 CWE-80 08/04/2026
WordPress TechOne theme <= 3.0.3 - Arbitrary Shortcode Execution vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through <= 3.0.3.
CVE-2026-39624 Média · 5.3 CWE-862 08/04/2026
WordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.
CVE-2026-39623 Alta · 7.5 CWE-98 08/04/2026
WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion.This issue affects Biolife: from n/a through <= 3.2.3.
CVE-2026-39613 Alta · 7.5 CWE-98 08/04/2026
WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through <= 2.3.3.
CVE-2026-39612 Média · 5.3 CWE-862 08/04/2026
WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability
Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.
CVE-2026-39611 Alta · 7.5 CWE-98 08/04/2026
WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through <= 4.2.9.
CVE-2026-25342 Alta · 7.1 CWE-79 25/03/2026
WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.