Xstore Core
Approved changes feed: RSS · Atom
cpe:2.3:a:8theme:xstore_core:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | 8Theme (182a790f-d72d-51a9-b7e7-fdbf46df7e53) |
|---|---|
| Product | Xstore Core (5ff95561-984d-5213-a5a3-8cc78c11800a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25307 |
vulnerable | 2026-06-08 07:53:19.621733 |
WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through < 5.7.
Published: 2026-02-19T08:26:53.190Z
Updated: 2026-04-28T16:14:54.778Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25306 |
vulnerable | 2026-06-08 07:53:19.621368 |
WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through <= 5.6.4.
Published: 2026-03-25T16:14:39.348Z
Updated: 2026-04-28T16:14:54.758Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64190 |
vulnerable | 2026-06-08 07:39:18.199985 |
WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows DOM-Based XSS.This issue affects XStore Core: from n/a through < 5.6.
Published: 2025-12-30T16:00:52.385Z
Updated: 2026-04-28T16:14:10.264Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64189 |
vulnerable | 2026-06-08 07:39:18.199628 |
WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through < 5.6.
Published: 2025-12-18T07:22:10.319Z
Updated: 2026-04-28T16:14:10.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33558 |
vulnerable | 2026-06-08 06:37:31.638620 |
WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
Published: 2024-04-29T08:15:18.797Z
Updated: 2026-04-28T16:09:42.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33557 |
vulnerable | 2026-06-08 06:37:31.638170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33556 |
vulnerable | 2026-06-08 06:37:31.637553 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33555 |
vulnerable | 2026-06-08 06:37:31.637081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33554 |
vulnerable | 2026-06-08 06:37:31.636697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33553 |
vulnerable | 2026-06-08 06:37:31.636212 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33552 |
vulnerable | 2026-06-08 06:37:31.635673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33551 |
vulnerable | 2026-06-08 06:37:31.634536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.