CVE-2024-33561 Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8

Description

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

Affected products and versions

Product	Affected versions	Fixed in
XStore 9.3	earliest → 9.3.8	No fix stated

Other CVEs of XStore

The 13 CVEs of XStore →

CVE-2026-25006 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore… 5.3 Medium CVE-2026-25305 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore… 6.5 Medium CVE-2025-64191 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore… 7.1 High CVE-2025-64192 Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control… 6.3 Medium