CVE-2026-39628 is a MEDIUM severity vulnerability in DukaMarket, a product by kutethemes. The vulnerability is classified as Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS), allowing Code Injection. This issue affects DukaMarket from n/a through <= 1.3.0. The CVE record was published on 2026-04-08T09:16:33.210Z and has not been modified since then. There is no information on [truncated]
A MEDIUM severity vulnerability, CVE-2026-39626, was found in kutethemes Armania armania. This issue, described as Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS), allows Code Injection. It affects Armania from n/a through version 1.4.8. The vulnerability has a CVSS score of 5.3 and is considered a MEDIUM priority for patching or mitigation. Users of kutethemes Armania armani [truncated]
A Missing Authorization vulnerability in kutethemes Biolife allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Biolife from n/a through <= 3.2.3. The vulnerability has a CVSS score of 5.3 and is classified as MEDIUM severity. Users of kutethemes Biolife, especially those with versions from n/a through 3.2.3, should be aware of this MEDIUM severity vulnerability.
A high-severity vulnerability, CVE-2026-39623, was found in the Biolife theme, allowing for PHP Local File Inclusion. This issue, with a CVSS score of 7.5, affects the Biolife theme from version n/a through 3.2.3. The vulnerability is an Improper Control of Filename for Include/Require Statement in PHP Program, also known as PHP Remote File Inclusion. It allows attackers to include local files, potentiall [truncated]
