8theme - vulnerabilities (CVEs)

25 CVEs in 2 products, 0 in the last 30 days, newest from 2026-03-25.

Products

• Xstore - 13 CVEs
• Xstore Core - 12 CVEs

Newest CVEs of 8theme

• CVE-2026-25306 - CVSS 7.1 (high), 2026-03-25: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected…
• CVE-2026-25305 - CVSS 6.5 (medium), 2026-02-19: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows DOM-Based XSS.This issue…
• CVE-2026-25006 - CVSS 5.3 (medium), 2026-02-19: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore allows Code Injection.This issue affects…
• CVE-2026-25307 - CVSS 6.5 (medium), 2026-02-19: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based…
• CVE-2025-64190 - CVSS 6.5 (medium), 2025-12-30: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based…
• CVE-2025-64193 - CVSS 7.5 (high), 2025-12-18: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows PHP Local…
• CVE-2025-64192 - CVSS 6.3 (medium), 2025-12-18: Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects XStore:…
• CVE-2025-64189 - CVSS 7.1 (high), 2025-12-18: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected…
• CVE-2025-64191 - CVSS 7.1 (high), 2025-12-18: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows Reflected XSS.This issue…
• CVE-2025-11746 - CVSS 8.8 (high), 2025-10-15: The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via theet_ajax_required_plugins_popup()…
• CVE-2025-60100 - CVSS 5.3 (medium), 2025-09-26: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore allows Code Injection.This issue affects…
• CVE-2024-33564 - CVSS 8.8 (high), 2024-06-09: Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
• CVE-2024-33561 - CVSS 9.8 (critical), 2024-06-09: Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
• CVE-2024-33555 - CVSS 8.8 (high), 2024-06-09: Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
• CVE-2024-33563 - CVSS 8.8 (high), 2024-06-09: Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
• CVE-2024-33560 - CVSS 9 (critical), 2024-06-04: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore allows PHP Local File Inclusion.This issue…
• CVE-2024-33557 - CVSS 8.8 (high), 2024-06-04: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue…
• CVE-2024-33552 - CVSS 9.8 (critical), 2024-05-17: Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore Core: from n/a through 5.3.8.
• CVE-2024-33556 - CVSS 9.8 (critical), 2024-05-17: Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
• CVE-2024-33558 - CVSS 6.5 (medium), 2024-04-29: Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
• CVE-2024-33553 - CVSS 9.8 (critical), 2024-04-29: Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
• CVE-2024-33562 - CVSS 7.1 (high), 2024-04-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore allows Reflected XSS.This issue affects…
• CVE-2024-33559 - CVSS 9.3 (critical), 2024-04-29: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects…
• CVE-2024-33554 - CVSS 7.1 (high), 2024-04-29: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue…
• CVE-2024-33551 - CVSS 9.8 (critical), 2024-04-29: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This issue…