| CVE-2026-25006 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore…
|
5.3
Medium
|
Feb 19, 2026 |
| CVE-2026-25305 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
6.5
Medium
|
Feb 19, 2026 |
| CVE-2025-64193 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
7.5
High
|
Dec 18, 2025 |
| CVE-2025-64192 |
Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control…
|
6.3
Medium
|
Dec 18, 2025 |
| CVE-2025-64191 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
7.1
High
|
Dec 18, 2025 |
| CVE-2025-11746 |
The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via…
|
8.8
High
|
Oct 15, 2025 |
| CVE-2025-60100 |
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore…
|
5.3
Medium
|
Sep 26, 2025 |
| CVE-2024-33561 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
7.5
High
|
Jun 9, 2024 |
| CVE-2024-33563 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
7.6
High
|
Jun 9, 2024 |
| CVE-2024-33564 |
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8
|
8.8
High
|
Jun 9, 2024 |
| CVE-2024-33560 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore allows PHP…
|
9.0
Critical
|
Jun 4, 2024 |
| CVE-2024-33559 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore…
|
9.3
Critical
|
Apr 29, 2024 |
| CVE-2024-33562 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore…
|
7.1
High
|
Apr 29, 2024 |