WordPress theme
Duka Market - Multipurpose eCommerce Template security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the theme or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium1
- Low0
All Duka Market - Multipurpose eCommerce Template vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Multipurpose eCommerce Template <= 1.3.0 - Unauthenticated Local File Inclusion ≤1.3.0No patch available | CVE-2026-48194 | |
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤1.3.0No patch available | CVE-2026-39628 |
- High8.1Multipurpose eCommerce Template <= 1.3.0 - Unauthenticated Local File Inclusion
≤1.3.0No patch available
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤1.3.0No patch available
Duka Market - Multipurpose eCommerce Template: common questions
Does Duka Market - Multipurpose eCommerce Template have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Duka Market - Multipurpose eCommerce Template: 1 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of Duka Market - Multipurpose eCommerce Template I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Duka Market - Multipurpose eCommerce Template vulnerability?
CVE-2026-48194, published Oct 7, 2026: Duka Market - Multipurpose eCommerce Template <= 1.3.0 - Unauthenticated Local File Inclusion. Severity: High (CVSS 8.1).
Is any Duka Market - Multipurpose eCommerce Template vulnerability listed in CISA KEV?
No. None of the known Duka Market - Multipurpose eCommerce Template vulnerabilities is currently listed in the CISA KEV catalog.