CVE-2026-39625

The CVE refers to WordPress TechOne theme (kutethemes) versions up to and including 3.0.3, describing an improper neutralization of script-related HTML tags in a web page that enables code injection. The linked records also classify the impact as basic XSS and associate it with arbitrary shortcod...