Log in Start free

8theme

Products

ProductCVEsExploitedLatest
XStore13–Feb 19, 2026
XStore Core12–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-25306 High 7.1 WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25307 Medium 6.5 WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25305 Medium 6.5 WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25006 Medium 5.3 WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability 0.3%
  • CVE-2025-64190 Medium 6.5 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64193 High 7.5 WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-64192 Medium 6.3 WordPress XStore theme < 9.6 - Broken Access Control vulnerability 0.2%
  • CVE-2025-64191 High 7.1 WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64189 High 7.1 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-11746 High 8.8 XStore | Multipurpose WooCommerce Theme <= 9.5.4 - Authenticated (Subscriber+) Local File Inclusion 0.7%
  • CVE-2025-60100 Medium 5.3 WordPress XStore theme < 9.6 - Content Injection vulnerability 0.3%
  • CVE-2024-33555 High 8.1 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability 0.4%
  • CVE-2024-33561 High 7.5 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability 0.4%
  • CVE-2024-33563 High 7.6 WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability 0.4%
  • CVE-2024-33564 High 8.8 WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability 0.3%
  • CVE-2024-33560 Critical 9.0 WordPress XStore theme <= 9.3.8 - Unauthenticated Local File Inclusion vulnerability 0.6%
  • CVE-2024-33557 High 8.5 WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability 0.6%
  • CVE-2024-33552 Critical 9.8 WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability 0.6%
  • CVE-2024-33556 High 8.2 WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability 0.6%
  • CVE-2024-33558 Medium 6.5 WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability 0.4%
  • CVE-2024-33553 Critical 9.0 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability 0.6%
  • CVE-2024-33551 Critical 9.3 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability 0.6%
  • CVE-2024-33559 Critical 9.3 WordPress XStore theme <= 9.3.5 - Unauthenticated SQL Injection vulnerability 3.6%
  • CVE-2024-33554 High 7.1 WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-33562 High 7.1 WordPress XStore theme <= 9.3.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%