Browse CVEs

CRITICAL 9.8 CVE-2024-33561 Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8. Xstore 9.3.9+ Fix from $2,3002024-06-09 HIGH 8.8 CVE-2024-33555 Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8. Xstore Core 5.3.9+ Fix from $1,9502024-06-09 HIGH 8.8 CVE-2024-33563 Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8. Xstore 9.3.9+ Fix from $1,9502024-06-09 HIGH 8.8 CVE-2024-33557 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.Th… Xstore Core 5.3.9+ Fix from $1,9502024-06-04 CRITICAL 9.8 CVE-2024-33552 Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore Core: from n/a through 5.3.8. Xstore Core 5.3.9+ Fix from $2,3002024-05-17 CRITICAL 9.8 CVE-2024-33556 Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8. Xstore Core 5.3.9+ Fix from $2,3002024-05-17 MEDIUM 6.5 CVE-2024-33558 Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5. Xstore Core 5.3.9+ Fix from $1,6002024-04-29 CRITICAL 9.8 CVE-2024-33553 Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5. Xstore Core 5.3.9+ Fix from $2,3002024-04-29 MEDIUM 6.1 CVE-2024-33554 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core allows Reflected XSS.This is… Xstore Core 5.3.9+ Fix from $1,6002024-04-29 CRITICAL 9.8 CVE-2024-33551 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore Core allows SQL Injection.This is… Xstore Core 5.3.9+ Fix from $2,3002024-04-29