CVE-2024-33560

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore allows PHP Local File Inclusion.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33559

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5...

CVE-2024-33561

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33552

Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33563

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33564

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33561

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33563

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33561

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33555

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33555

CVE-2024-33555 (WordPress XStore Core) is documented as a Missing Authorization vulnerability affecting XStore Core up to version 5.3.8. Public sources list affected products as the 8theme XStore Core plugin for WordPress, with remediation guidance indicating upgrading to a version later than 5.3...

CVE-2024-33561

CVE-2024-33561 - Summary (validated from connected docs) Affected product: 8theme XStore (WordPress/WooCommerce theme) versions up to 9.3.8 (n/a through 9.3.8 range cited) as described in the CVE entry and Red Hat advisory. Vulnerability type and root cause: Missing Authorization / unauthenticate...

CVE-2024-33564

CVE-2024-33564 refers to a Missing Authorization vulnerability in the WordPress XStore (8theme XStore) theme. Public details indicate an Arbitrary Option Update issue affecting XStore versions up to 9.3.8 (inclusive). The root cause is missing authorization allowing unauthorized changes to theme ...

PT-2024-25332 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions 9.3.8 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects 8theme XStore, allowing unauthorized access. The estimated number of potentially affected devices...

CVE-2024-33555: Missing Authorization

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33560

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore allows PHP Local File Inclusion.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33557

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33557: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...

PT-2024-25328

Name of the Vulnerable Software and Affected Versions 8theme XStore versions n/a through 9.3.8 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. Recommendations For versions n/...

PT-2024-25325

Name of the Vulnerable Software and Affected Versions 8theme XStore Core versions through 5.3.8 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allows PHP Local File Inclusion. Recommendations For versions...