Kutethemes

11 CVEs across 8 Kutethemes products. Browse Kutethemes vulnerabilities, severities, and proof-of-concept exploits.

Kutethemes products with known CVEs

ProductCVEs
Biolife2
Boutique2
Kuteshop2
Armania1
Dukamarket1
Ovic Responsive Wpbakery1
Techone1
Uminex1
Kutethemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39629Medium5.32026-04-08Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affect…
CVE-2026-39628Medium5.32026-04-08Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issu…
CVE-2026-39626Medium5.32026-04-08Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affe…
CVE-2026-39625Medium5.32026-04-08Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affe…
CVE-2026-39624Medium5.32026-04-08Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bi…
CVE-2026-39623High7.52026-04-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Biolife biolife allows PHP…
CVE-2026-39613High7.52026-04-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes Boutique kute-boutique allo…
CVE-2026-39612Medium5.32026-04-08Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-39611High7.52026-04-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in kutethemes KuteShop kuteshop allows PH…
CVE-2026-25342High7.12026-03-25Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.Th…
CVE-2023-5235High8.82024-01-08The Ovic Responsive WPBakery WordPress plugin before 1.2.9 does not limit which options can be updated via some of its AJAX actions, which may allow attackers…