8theme XStore Core

• CVE-2026-25306 High 7.1 WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-25307 Medium 6.5 WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-64190 Medium 6.5 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-64189 High 7.1 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2024-33555 High 8.1 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability 0.4%
• CVE-2024-33557 High 8.5 WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability 0.6%
• CVE-2024-33552 Critical 9.8 WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability 0.6%
• CVE-2024-33556 High 8.2 WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability 0.6%
• CVE-2024-33558 Medium 6.5 WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability 0.4%
• CVE-2024-33553 Critical 9.0 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability 0.6%
• CVE-2024-33551 Critical 9.3 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability 0.6%
• CVE-2024-33554 High 7.1 WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%