47 matches found
CVE-2024-33563
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33563
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33561
Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33564
CVE-2024-33564 refers to a Missing Authorization vulnerability in the WordPress XStore (8theme XStore) theme. Public details indicate an Arbitrary Option Update issue affecting XStore versions up to 9.3.8 (inclusive). The root cause is missing authorization allowing unauthorized changes to theme ...
PT-2024-25332 · 8Theme · 8Theme Xstore
Name of the Vulnerable Software and Affected Versions: 8theme XStore versions 9.3.8 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects 8theme XStore, allowing unauthorized access. The estimated number of potentially affected devices...
CVE-2024-33560
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore allows PHP Local File Inclusion.This issue affects XStore: from n/a through 9.3.8...
CVE-2024-33557
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33557: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33556
Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33556
CVE-2024-33556 involves the WordPress plugin XStore Core (8theme) with an Unrestricted Upload of File with Dangerous Type vulnerability. Affected versions are XStore Core up to 5.3.8 (root note uses “from n/a through 5.3.8”). Connected sources confirm the issue is a file upload vulnerability, ena...
CVE-2024-33556: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...
CVE-2024-33558
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5...
CVE-2024-33553
Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5...
CVE-2024-33553 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5...
CVE-2024-33553
The 8theme XStore Core WordPress plugin (versions
CVE-2024-33562
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore allows Reflected XSS.This issue affects XStore: from n/a through 9.3.5...
CVE-2024-33559
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5...
CVE-2024-33551
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore Core allows SQL Injection.This issue affects XStore Core: from n/a through 5.3.5...
CVE-2024-33551
The 8theme XStore Core WordPress plugin (versions n/a through 5.3.8 ) is vulnerable to an unauthenticated SQL Injection due to improper neutralization of special elements in SQL commands. This flaw allows attackers to execute malicious SQL commands on the database, potentially leading to data the...