Skip to content
OpenAdvisories

Product · 8theme

XStore Core

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2026-25306

    WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through <= 5.6.4.

    8theme XStore Core
  • High 7.1
    CVE-2025-64189

    WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through < 5.6.

    8theme XStore Core
  • High 8.1
    CVE-2024-33555

    WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability

    Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.

    8theme XStore Core
  • High 8.5
    CVE-2024-33557

    WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8.

    8theme XStore Core
  • High 8.2
    CVE-2024-33556

    WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.

    8theme XStore Core
  • High 7.1
    CVE-2024-33554

    WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5.

    8theme XStore Core