8theme XStore Core vulnerabilities

CVEs per yearBy the year they were published

1. 20248
2. 20252
3. 20262

Newest CVEs

• CVE-2026-25306

  WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability

  8theme · XStore Core

  High7.1
• CVE-2026-25307

  WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability

  8theme · XStore Core

  Medium6.5
• CVE-2025-64190

  WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability

  8theme · XStore Core

  Medium6.5
• CVE-2025-64189

  WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability

  8theme · XStore Core

  High7.1
• CVE-2024-33555

  WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability

  8theme · XStore Core

  High8.1
• CVE-2024-33557

  WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability

  8theme · XStore Core

  High8.5
• CVE-2024-33552

  WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability

  8theme · XStore Core

  Critical9.8
• CVE-2024-33556

  WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability

  8theme · XStore Core

  High8.2
• CVE-2024-33558

  WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability

  8theme · XStore Core

  Medium6.5
• CVE-2024-33553

  WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability

  8theme · XStore Core

  Critical9.0