CVE-2026-62098

Unauthenticated Content Injection in Boutique = 2.3.3 versions...

CVE-2026-62099

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

EUVD-2026-96501

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

CVE-2026-62099 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

CVE-2026-62099

The Boutique theme for WordPress (versions

CVE-2026-62098 WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

Unauthenticated Content Injection in Boutique = 2.3.3 versions...

EUVD-2026-96500

Unauthenticated Content Injection in Boutique = 2.3.3 versions...

CVE-2026-62098

The WordPress Boutique theme (versions

PT-2026-109832

Name of the Vulnerable Software and Affected Versions Boutique versions prior to 2.3.4 Description An issue allows unauthenticated users to perform content injection. Recommendations Update to a version newer than 2.3.3...

PT-2026-109833

Name of the Vulnerable Software and Affected Versions Boutique versions prior to 2.3.4 Description An unauthenticated Local File Inclusion issue exists, allowing an attacker to read files from the local file system without requiring authentication. Recommendations Update to a version newer than...

WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Boutique versions = 2.3.3...

WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Boutique versions = 2.3.3...

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

EUVD-2026-20249

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

CVE-2026-39613 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

CVE-2026-39613

CVE-2026-39613 concerns a Local File Inclusion in the WordPress Boutique theme by Kutethemes (kute-boutique). All connected sources consistently describe an improper control of the filename used by PHP include/require, enabling LFI. Affected software: Boutique theme versions up to and including 2...

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

CVE-2026-39613 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...