CVE Catalog
CVE-2026-39629
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
The WordPress theme Uminex (uminex) by kutethemes has a basic XSS vulnerability due to improper neutralization of script-related HTML tags. This allows code injection and affects versions up to and including 1.0.9.
Risk Assessment
An attacker can inject malicious JavaScript that executes in visitors' browsers, potentially leading to session data theft or redirects.
Recommendation
Update the Uminex theme to a version above 1.0.9 if a patch is available, or apply input filtering and output encoding.
Original NVD description (English source)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex: from n/a through <= 1.0.9.