← WordPress Vulnerabilities
WordPress security by component

KuteShop

KuteShop is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 08, 2026; the highest CVE/CNA score is 7.5.

Theme slug: kuteshop

CVE-2026-39612: KuteShop: A security weakness

KuteShop is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.2.9.

PublishedApr 08, 2026
Known safe version> 4.2.9
Safe version
Apr 08, 2026 CVE-2026-39612
KuteShop: A security weakness
KuteShop is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 4.2.9.
> 4.2.9
CVE5.3
NVDPending
Apr 08, 2026 CVE-2026-39611
KuteShop: Filesystem traversal
KuteShop is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is <= 4.2.9.
> 4.2.9
CVE7.5
NVDPending