8theme vulnerabilities
25 CVEs and advisories name 8theme as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-25306WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-25307WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-25305WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-25006WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability
- CVE-2025-64190WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64193WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
- CVE-2025-64192WordPress XStore theme < 9.6 - Broken Access Control vulnerability
- CVE-2025-64191WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64189WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-11746XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion
- CVE-2025-60100WordPress XStore theme < 9.6 - Content Injection vulnerability
- CVE-2024-33555WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
- CVE-2024-33561WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-33563WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability
- CVE-2024-33564WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability
- CVE-2024-33560WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability
- CVE-2024-33557WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability
- CVE-2024-33552WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability
- CVE-2024-33556WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability
- CVE-2024-33558WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
- CVE-2024-33553WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability
- CVE-2024-33551WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability
- CVE-2024-33559WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability
- CVE-2024-33554WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-33562WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability