8theme vulnerabilities

25 published CVEs name 8theme among the affected products.

Critical 5High 13Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-25306
WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability
8theme · XStore Core
High7.1
CVE-2026-25307
WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability
8theme · XStore Core
Medium6.5
CVE-2026-25305
WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability
8theme · XStore
Medium6.5
CVE-2026-25006
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability
8theme · XStore
Medium5.3
CVE-2025-64190
WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
8theme · XStore Core
Medium6.5
CVE-2025-64193
WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
8theme · XStore
High7.5
CVE-2025-64192
WordPress XStore theme < 9.6 - Broken Access Control vulnerability
8theme · XStore
Medium6.3
CVE-2025-64191
WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability
8theme · XStore
High7.1
CVE-2025-64189
WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
8theme · XStore Core
High7.1
CVE-2025-11746
XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion
8theme · XStore
High8.8