Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Vendor: kutethemes Clear all filters
TI-2026-70364 CVE-2026-48193 · GHSA-3cw5-84p5-rfw8

Local file inclusion in WordPress Uminex theme

Priority LOW 37

Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00338 Published 2026-10-10 No fix listed CWE-98
TI-2026-28600 CVE-2026-39629 · GHSA-g496-v2vq-m798

WordPress Uminex theme <= 1.0.9 - Arbitrary Shortcode Execution vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00245 Published 2026-04-08 No fix listed CWE-80
TI-2026-28599 CVE-2026-39628 · GHSA-36hh-hpjf-wc4x

WordPress DukaMarket theme <= 1.3.0 - Arbitrary Shortcode Execution vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affects DukaMarket: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0027 Published 2026-04-08 No fix listed CWE-80
TI-2026-28597 CVE-2026-39626 · GHSA-7p7h-fj5m-w5p9

WordPress Armania theme <= 1.4.8 - Arbitrary Shortcode Execution vulnerability

Priority LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Armania: from n/a through <= 1.4.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00205 Published 2026-04-08 No fix listed CWE-80
TI-2026-28596 CVE-2026-39625 · GHSA-65jg-j4jj-9wfr

WordPress TechOne theme <= 3.0.3 - Arbitrary Shortcode Execution vulnerability

Priority LOW 30

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects TechOne: from n/a through <= 3.0.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00245 Published 2026-04-08 No fix listed CWE-80
TI-2026-28595 CVE-2026-39624 · GHSA-vrj8-g8cm-3mjv

WordPress Biolife theme <= 3.2.3 - Arbitrary Shortcode Execution vulnerability

Priority LOW 29

Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2026-28594 CVE-2026-39623 · GHSA-g5mv-4v3p-hp4g

WordPress Biolife theme <= 3.2.3 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP Local File Inclusion.This issue affects Biolife: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98
TI-2026-28584 CVE-2026-39613 · GHSA-p53h-m58m-98mh

WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98
TI-2026-28583 CVE-2026-39612 · GHSA-mfmr-7g5x-h6pm

WordPress KuteShop theme <= 4.2.9 - Arbitrary Shortcode Execution vulnerability

Priority LOW 29

Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through <= 4.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2026-28582 CVE-2026-39611 · GHSA-2qvj-7467-692p

WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00396 Published 2026-04-08 No fix listed CWE-98
TI-2023-04813 CVE-2023-5235 · GHSA-7qh3-wv79-v2r6

Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update

Priority HIGH 73

The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers with a subscriber+ account to update blog options, such as 'u…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0056 Published 2024-01-08 Fixed in 1.2.9 CWE-502