CVE-2026-62100: WordPress KuteShop theme <= 4.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions.
Affected Software
1 affected component
WordPress KuteShop<=4.2.9
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account or any special access to attempt exploitation?
No authentication or privileges are required. The attack is network-reachable and has low attack complexity, but it requires user interaction.
2
Which deployments should be treated as affected during triage?
WordPress sites using KuteShop version 4.2.9 or earlier should be treated as affected based on the available version range.