8theme vulnerabilities

Products

• Xstore 15
• Xstore Core 12
• Xstore Core 8

Newest

• 8theme xstore WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-105065 7.1 HighOctober 15, 2026
• 8theme xstore XStore < 9.7.3 - Unauthenticated SQLi CVE-2026-3326 Public exploit 8.6 HighJune 10, 2026
• 8theme xstore core WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-25306 7.1 HighMarch 25, 2026
• 8theme xstore core WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-25307 6.5 MediumFebruary 19, 2026
• 8theme xstore WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-25305 6.5 MediumFebruary 19, 2026
• 8theme xstore WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability CVE-2026-25006 5.3 MediumFebruary 19, 2026
• 8theme xstore core WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-64190 6.5 MediumDecember 30, 2025
• 8theme xstore WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability CVE-2025-64193 7.5 HighDecember 18, 2025
• 8theme xstore WordPress XStore theme < 9.6 - Broken Access Control vulnerability CVE-2025-64192 6.3 MediumDecember 18, 2025
• 8theme xstore WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-64191 7.1 HighDecember 18, 2025
• 8theme xstore core WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-64189 7.1 HighDecember 18, 2025
• 8theme xstore XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion CVE-2025-11746 8.8 HighOctober 15, 2025
• 8theme xstore WordPress XStore theme < 9.6 - Content Injection vulnerability CVE-2025-60100 5.3 MediumSeptember 26, 2025
• 8theme xstore core WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability CVE-2024-33555 8.1 HighJune 9, 2024
• 8theme xstore WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability CVE-2024-33561 7.5 HighJune 9, 2024
• 8theme xstore WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability CVE-2024-33563 7.6 HighJune 9, 2024
• 8theme xstore WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability CVE-2024-33564 8.8 HighJune 9, 2024
• 8theme xstore WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability CVE-2024-33560 9.0 CriticalJune 4, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability CVE-2024-33557 8.5 HighJune 4, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability CVE-2024-33552 9.8 CriticalMay 17, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability CVE-2024-33556 8.2 HighMay 17, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability CVE-2024-33558 6.5 MediumApril 29, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability CVE-2024-33553 9.0 CriticalApril 29, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability CVE-2024-33551 9.3 CriticalApril 29, 2024
• 8theme xstore WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability CVE-2024-33559 Public exploit 9.3 CriticalApril 29, 2024
• 8theme xstore core WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-33554 7.1 HighApril 29, 2024
• 8theme xstore WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-33562 7.1 HighApril 29, 2024