Approved changes feed: RSS · Atom
cpe:2.3:a:8theme:xstore:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | 8Theme (182a790f-d72d-51a9-b7e7-fdbf46df7e53) |
|---|---|
| Product | Xstore (7117efb6-2117-5878-9d8f-106dfef02b22) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-25305 |
vulnerable | 2026-06-08 07:53:19.619673 |
WordPress XStore theme <= 9.6.4 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows DOM-Based XSS.This issue affects XStore: from n/a through <= 9.6.4.
Published: 2026-02-19T08:26:52.704Z
Updated: 2026-04-28T16:14:54.312Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25006 |
vulnerable | 2026-06-08 07:53:18.823321 |
WordPress XStore theme <= 9.6.4 - Arbitrary Shortcode Execution vulnerability
MEDIUM (5.3)
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in 8theme XStore xstore allows Code Injection.This issue affects XStore: from n/a through <= 9.6.4.
Published: 2026-02-19T08:26:52.080Z
Updated: 2026-04-28T16:14:53.207Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64193 |
vulnerable | 2026-06-08 07:39:18.203211 |
WordPress XStore theme < 9.6.1 - Local File Inclusion vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows PHP Local File Inclusion.This issue affects XStore: from n/a through < 9.6.1.
Published: 2025-12-18T07:22:10.879Z
Updated: 2026-04-28T18:23:04.050Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64192 |
vulnerable | 2026-06-08 07:39:18.202828 |
WordPress XStore theme < 9.6 - Broken Access Control vulnerability
MEDIUM (6.3)
Missing Authorization vulnerability in 8theme XStore xstore allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects XStore: from n/a through < 9.6.
Published: 2025-12-18T07:22:10.694Z
Updated: 2026-04-28T18:22:55.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-64191 |
vulnerable | 2026-06-08 07:39:18.202510 |
WordPress XStore theme < 9.6.1 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore xstore allows Reflected XSS.This issue affects XStore: from n/a through < 9.6.1.
Published: 2025-12-18T07:22:10.489Z
Updated: 2026-04-28T18:22:46.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-60100 |
vulnerable | 2026-06-08 07:37:26.624628 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11746 |
vulnerable | 2026-06-08 07:04:28.861636 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33564 |
vulnerable | 2026-06-08 06:37:31.645016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33563 |
vulnerable | 2026-06-08 06:37:31.644517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33562 |
vulnerable | 2026-06-08 06:37:31.644137 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33561 |
vulnerable | 2026-06-08 06:37:31.642516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33560 |
vulnerable | 2026-06-08 06:37:31.642126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-33559 |
vulnerable | 2026-06-08 06:37:31.641633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.