8theme XStore vulnerabilities

CVEs per yearBy the year they were published

1. 20246
2. 20255
3. 20262

Newest CVEs

• CVE-2026-25305

  WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability

  8theme · XStore

  Medium6.5
• CVE-2026-25006

  WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability

  8theme · XStore

  Medium5.3
• CVE-2025-64193

  WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability

  8theme · XStore

  High7.5
• CVE-2025-64192

  WordPress XStore theme < 9.6 - Broken Access Control vulnerability

  8theme · XStore

  Medium6.3
• CVE-2025-64191

  WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability

  8theme · XStore

  High7.1
• CVE-2025-11746

  XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion

  8theme · XStore

  High8.8
• CVE-2025-60100

  WordPress XStore theme < 9.6 - Content Injection vulnerability

  8theme · XStore

  Medium5.3
• CVE-2024-33561

  WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability

  8theme · XStore

  High7.5
• CVE-2024-33563

  WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability

  8theme · XStore

  High7.6
• CVE-2024-33564

  WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability

  8theme · XStore

  High8.8