6.3
Medium
CVE-2025-64192 Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects XStore: from n/a through < 9.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XStore 9.6 | earliest → 9.6 | No fix stated |
Other CVEs of XStore
The 13 CVEs of XStore →
CVE-2026-25006
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore…
5.3
Medium
CVE-2026-25305
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
6.5
Medium
CVE-2025-64193
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High
CVE-2025-64191
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
7.1
High