Lucene search
+L

94 matches found

EUVD
EUVD
•added 2026/10/10 7:35 p.m.•5 views

EUVD-2026-96501

Unauthenticated Local File Inclusion in Boutique = 2.3.3 versions...

8.1CVSS5.8AI score
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•7 views

CVE-2026-62099

The Boutique theme for WordPress (versions

8.1CVSS5.8AI score
SaveExploits0References1
CVE
CVE
•added 2026/10/10 7:35 p.m.•6 views

CVE-2026-62098

The WordPress Boutique theme (versions

6.5CVSS5.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/10/10 7:35 p.m.•4 views

EUVD-2026-96500

Unauthenticated Content Injection in Boutique = 2.3.3 versions...

6.5CVSS5.8AI score
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/07 12:27 p.m.•3 views

WordPress Boutique theme <= 2.3.3 - Arbitrary Shortcode Execution vulnerability

Arbitrary Shortcode Execution vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Boutique versions = 2.3.3...

6.5CVSS5.8AI score
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2026/10/07 12:17 p.m.•6 views

WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Boutique versions = 2.3.3...

8.1CVSS5.8AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/06 12:00 a.m.•6 views

PT-2026-68560

Name of the Vulnerable Software and Affected Versions 69 Clothing versions prior to 1.2.11.2 Description The 69 Clothing | Brand Store & Fashion Boutique WordPress Theme is susceptible to PHP Object Injection, a condition where an application deserializes untrusted input, allowing an attacker to...

9.8CVSS6.3AI score0.00564EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/04/10 7:23 p.m.•15 views

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•20 views

EUVD-2026-20249

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

5.9AI score0.00511EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•20 views

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

7.5CVSS0.00511EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•11 views

CVE-2026-39613 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

5.8AI score0.00511EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•44 views

CVE-2026-39613 WordPress Boutique theme <= 2.3.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

7.5CVSS0.00511EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/08 8:30 a.m.•34 views

CVE-2026-39613

CVE-2026-39613 concerns a Local File Inclusion in the WordPress Boutique theme by Kutethemes (kute-boutique). All connected sources consistently describe an improper control of the filename used by PHP include/require, enabling LFI. Affected software: Boutique theme versions up to and including 2...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•19 views

CVE-2026-39613

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

5.9AI score0.00511EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•7 views

CVE-2026-39613: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•18 views

WordPress plugin Boutique 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00511EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•24 views

PT-2026-31178

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in kutethemes Boutique kute-boutique allows PHP Local File Inclusion.This issue affects Boutique: from n/a through = 2.3.3...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/03/26 5:04 p.m.•19 views

CVE-2026-25342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through 2.4.6...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•18 views

EUVD-2026-15655

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through 2.4.6...

7.1CVSS5.8AI score0.00175EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•15 views

CVE-2026-25342

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kutethemes Boutique kute-boutique allows Reflected XSS.This issue affects Boutique: from n/a through 2.4.6...

7.1CVSS0.00175EPSS
SaveExploits0References1
Rows per page
Query Builder