KuteShop vulnerabilities
4 known CVE vulnerabilities in KuteShop, translated and rated.
- CVE-2026-62115High
The KuteShop theme in versions up to and including 4.2.9 is vulnerable to unauthenticated Local File Inclusion. An attacker can load files from the server.
- CVE-2026-62100High
The KuteShop theme in versions up to and including 4.2.9 contains an unauthenticated Cross Site Scripting (XSS) flaw. It allows injection of malicious script into site pages.
- CVE-2026-39612Medium
The KuteShop WordPress theme has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 4.2.9.
- CVE-2026-39611High
The KuteShop WordPress theme contains a PHP Local File Inclusion (LFI) vulnerability due to improper filename control in include/require statements. Attackers can read arbitrary files on the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS