CVE-2026-62115

Unauthenticated Local File Inclusion in KuteShop = 4.2.9 versions...

CVE-2026-62100

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62100

The KuteShop WordPress theme (versions

EUVD-2026-96502

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62115 WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in KuteShop = 4.2.9 versions...

EUVD-2026-96503

Unauthenticated Local File Inclusion in KuteShop = 4.2.9 versions...

CVE-2026-62115

The KuteShop theme for WordPress (versions

CVE-2026-62100 WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

CVE-2026-62115: Improper Control of Filename for Include/Require Statement in PHP Program

Unauthenticated Local File Inclusion in KuteShop = 4.2.9 versions...

CVE-2026-62100: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in KuteShop = 4.2.9 versions...

PT-2026-109834

Name of the Vulnerable Software and Affected Versions KuteShop versions prior to 4.3.0 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations Updat...

PT-2026-109835

Name of the Vulnerable Software and Affected Versions KuteShop versions prior to 4.3.0 Description An unauthenticated Local File Inclusion LFI issue exists, which allows an attacker to read files from the local server without requiring authentication. Recommendations Update to a version newer tha...

WordPress KuteShop theme <= 4.2.9 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme KuteShop versions = 4.2.9...

WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme KuteShop versions = 4.2.9...

CVE-2026-39612

Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through = 4.2.9...

CVE-2026-39611

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through = 4.2.9...

EUVD-2026-20247

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through = 4.2.9...

EUVD-2026-20248

Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through = 4.2.9...

CVE-2026-39611

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes KuteShop kuteshop allows PHP Local File Inclusion.This issue affects KuteShop: from n/a through = 4.2.9...

CVE-2026-39612

Missing Authorization vulnerability in kutethemes KuteShop kuteshop allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects KuteShop: from n/a through = 4.2.9...