Xstore Core
Approved changes feed: RSS · Atom
cpe:2.3:a:8theme:xstore_core:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | 8Theme (182a790f-d72d-51a9-b7e7-fdbf46df7e53) |
|---|---|
| Product | Xstore Core (5ff95561-984d-5213-a5a3-8cc78c11800a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33558 |
vulnerable | 2026-06-08 06:37:31.638650 |
WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
Published: 2024-04-29T08:15:18.797Z
Updated: 2026-04-28T16:09:42.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33557 |
vulnerable | 2026-06-08 06:37:31.638292 |
WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability
HIGH (8.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8.
Published: 2024-06-04T13:05:51.999Z
Updated: 2026-04-28T16:09:42.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33556 |
vulnerable | 2026-06-08 06:37:31.637715 |
WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability
HIGH (8.2)
Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
Published: 2024-05-17T06:12:45.099Z
Updated: 2026-04-28T16:09:42.843Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33555 |
vulnerable | 2026-06-08 06:37:31.637110 |
WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability
HIGH (8.1)
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8.
Published: 2024-06-09T12:07:22.189Z
Updated: 2026-04-28T16:09:42.813Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33554 |
vulnerable | 2026-06-08 06:37:31.636741 |
WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5.
Published: 2024-04-29T05:16:21.348Z
Updated: 2026-04-28T16:09:42.811Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33553 |
vulnerable | 2026-06-08 06:37:31.636251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33552 |
vulnerable | 2026-06-08 06:37:31.635843 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33551 |
vulnerable | 2026-06-08 06:37:31.635236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.