Advisories · Technology
8theme XStore.
Every CVE that names 8theme XStore among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability
- 8theme XStore
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability
- 8theme XStore
- Cross-site scripting (XSS)
- CVSS 7.5 High
WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
- 8theme XStore
- File inclusion
- CVSS 6.3 Medium
WordPress XStore theme < 9.6 - Broken Access Control vulnerability
- 8theme XStore
- Broken access control
- CVSS 7.1 High
WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability
- 8theme XStore
- Cross-site scripting (XSS)
- CVSS 8.8 High
XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion
- 8theme XStore
- Path traversal
- CVSS 5.3 Medium
WordPress XStore theme < 9.6 - Content Injection vulnerability
- 8theme XStore
- Cross-site scripting (XSS)
- CVSS 7.5 High
WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
- 8theme XStore
- Broken access control
- CVSS 7.6 High
WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability
- 8theme XStore
- Broken access control
- CVSS 8.8 High
WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability
- 8theme XStore
- Broken access control
- CVSS 9.0 CriticalCritical · CVSS 9+
WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability
- 8theme XStore
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability
- 8theme XStore
- SQL injection
- CVSS 7.1 High
WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
- 8theme XStore
- Cross-site scripting (XSS)