| CVE-2026-25006 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore…
|
5.3
Moyenne
|
19 févr. 2026 |
| CVE-2026-25305 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
6.5
Moyenne
|
19 févr. 2026 |
| CVE-2025-64193 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
7.5
Élevée
|
18 déc. 2025 |
| CVE-2025-64192 |
Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control…
|
6.3
Moyenne
|
18 déc. 2025 |
| CVE-2025-64191 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
7.1
Élevée
|
18 déc. 2025 |
| CVE-2025-11746 |
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via…
|
8.8
Élevée
|
15 oct. 2025 |
| CVE-2025-60100 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore…
|
5.3
Moyenne
|
26 sept. 2025 |
| CVE-2024-33561 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
7.5
Élevée
|
9 juin 2024 |
| CVE-2024-33563 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
7.6
Élevée
|
9 juin 2024 |
| CVE-2024-33564 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
8.8
Élevée
|
9 juin 2024 |
| CVE-2024-33560 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore allows PHP…
|
9.0
Critique
|
4 juin 2024 |
| CVE-2024-33559 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore…
|
9.3
Critique
|
29 avr. 2024 |
| CVE-2024-33562 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
7.1
Élevée
|
29 avr. 2024 |