kutethemes has 12 CVEs on record. Disclosure cadence is accelerating: 12 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 12. The median CVSS is 8.1 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-98 (7) and CWE-79 (4). Most affected products: Armania (2), Biolife (2), Boutique (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.1
- Publish → KEV
- —
- Last 90 days
- 12 prev 0
Products
- Armania 2
- Biolife 2
- Boutique 2
- KuteShop 2
- TechOne 2
- DukaMarket 1
Worst active — by depth score
CVE-2026-62115High· 8.1Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.45CVE-2026-62099High· 8.1Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.45CVE-2026-62096High· 8.1Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.45CVE-2026-62094High· 8.1Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.45CVE-2026-62092High· 8.1Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.45
kutethemes vulnerabilities
CVEs affecting kutethemes, newest first. Open any entry for full detail, references, and exploit status.
12 CVEsRSS
CVE-2026-62115High· 8.1Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions.
CVE-2026-62100High· 7.1Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
CVE-2026-62099High· 8.1Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions.
CVE-2026-62098Medium· 6.5Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
Unauthenticated Content Injection in Boutique <= 2.3.3 versions.
CVE-2026-62096High· 8.1Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions.
CVE-2026-62095High· 7.1Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions.
CVE-2026-62094High· 8.1Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions.
CVE-2026-62093High· 7.1Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions.
CVE-2026-62092High· 8.1Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions.
CVE-2026-62091High· 7.1Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions.
CVE-2026-48194High· 8.1Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.
CVE-2026-48193High· 8.1Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.
Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.