kutethemes

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

kutethemes records in CISA KEV

No kutethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ovic Responsive Wpbakery 1 record HIGH

Records

23 records

TI-2023-04813 CVE-2023-5235 · GHSA-7qh3-wv79-v2r6

Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update

HIGH 73

The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'u…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0056 Published 2024-01-08 Fixed in 1.2.9 CWE-502

TI-2026-70413 CVE-2026-62115 · GHSA-229w-gqhq-c4fp

Local file inclusion in KuteShop WordPress theme

LOW 37

Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00274 Published 2026-10-10 No fix listed CWE-98

TI-2026-70411 CVE-2026-62099 · GHSA-ph7h-wchq-83m3

Local file inclusion in WordPress Boutique theme

LOW 37

Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00274 Published 2026-10-10 No fix listed CWE-98

TI-2026-70409 CVE-2026-62096 · GHSA-hfhp-gvc8-6hcg

Unauthenticated Local File Inclusion in WordPress Biolife theme

LOW 37

Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00274 Published 2026-10-10 No fix listed CWE-98

TI-2026-70407 CVE-2026-62094 · GHSA-w2hx-xwqv-j8f3

Local file inclusion in kutethemes TechOne WordPress theme

LOW 37

Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00274 Published 2026-10-10 No fix listed CWE-98

TI-2026-70405 CVE-2026-62092 · GHSA-h942-cg9m-fr8x

Local file inclusion in WordPress Armania theme

LOW 37

Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00274 Published 2026-10-10 No fix listed CWE-98

TI-2026-70365 CVE-2026-48194 · GHSA-pw5w-c4q7-hmj7

Local file inclusion in WordPress DukaMarket theme

LOW 37

Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00338 Published 2026-10-10 No fix listed CWE-98

TI-2026-70364 CVE-2026-48193 · GHSA-3cw5-84p5-rfw8

Local file inclusion in WordPress Uminex theme

LOW 37

Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00338 Published 2026-10-10 No fix listed CWE-98

TI-2026-28594 CVE-2026-39623 · GHSA-g5mv-4v3p-hp4g

WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion.This issue affects Biolife: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98

TI-2026-28584 CVE-2026-39613 · GHSA-p53h-m58m-98mh

WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98

TI-2026-28582 CVE-2026-39611 · GHSA-2qvj-7467-692p

WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98

TI-2026-70410 CVE-2026-62098 · GHSA-5xcc-f8xx-r3h4

Arbitrary shortcode execution in WordPress Boutique theme

LOW 34

Unauthenticated Content Injection in Boutique <= 2.3.3 versions.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00199 Published 2026-10-10 No fix listed CWE-94

TI-2026-70412 CVE-2026-62100 · GHSA-rf5x-gq26-cmp9

Reflected cross-site scripting in WordPress KuteShop theme

LOW 30

Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 No fix listed CWE-79

TI-2026-70408 CVE-2026-62095 · GHSA-m384-c475-2m4f

Reflected cross-site scripting in WordPress Biolife theme

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 No fix listed CWE-79

TI-2026-70406 CVE-2026-62093 · GHSA-jg85-v5f9-79j3

Reflected cross-site scripting in WordPress TechOne theme

LOW 30

Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0018 Published 2026-10-10 No fix listed CWE-79

TI-2026-70404 CVE-2026-62091 · GHSA-28h8-x569-2ch3

Reflected cross-site scripting in WordPress Armania theme

LOW 30

Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 No fix listed CWE-79

TI-2026-28600 CVE-2026-39629 · GHSA-g496-v2vq-m798

WordPress Uminex theme <= 1.0.9 - Arbitrary Shortcode Execution vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00245 Published 2026-04-08 No fix listed CWE-80

TI-2026-28599 CVE-2026-39628 · GHSA-36hh-hpjf-wc4x

WordPress DukaMarket theme <= 1.3.0 - Arbitrary Shortcode Execution vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0027 Published 2026-04-08 No fix listed CWE-80

TI-2026-28596 CVE-2026-39625 · GHSA-65jg-j4jj-9wfr

WordPress TechOne theme <= 3.0.3 - Arbitrary Shortcode Execution vulnerability

LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through <= 3.0.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00245 Published 2026-04-08 No fix listed CWE-80

TI-2026-20460 CVE-2026-25342 · GHSA-cgw4-r4c2-m7c6

WordPress Boutique theme < 2.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through < 2.4.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79

TI-2026-28597 CVE-2026-39626 · GHSA-7p7h-fj5m-w5p9

WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability

LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a through <= 1.4.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00205 Published 2026-04-08 No fix listed CWE-80

TI-2026-28595 CVE-2026-39624 · GHSA-vrj8-g8cm-3mjv

WordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability

LOW 29

Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862

TI-2026-28583 CVE-2026-39612 · GHSA-mfmr-7g5x-h6pm

WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability

LOW 29

Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862

Open these records in search →