TechOne vulnerabilities

3 known CVE vulnerabilities in TechOne, translated and rated.

CVE-2026-62094High
Unauthenticated Local File Inclusion (LFI) in TechOne versions up to 3.0.3. Allows an attacker to read files from the server without authentication.
CVE-2026-62093High
Unauthenticated Cross Site Scripting (XSS) in TechOne versions up to 3.0.3. Allows an attacker to inject malicious scripts into a victim's browser.
CVE-2026-39625Medium
The WordPress theme TechOne (techone) by kutethemes has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection and affects versions up to and including 3.0.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS