CVE-2024-33554

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 8theme XStore Core allows Reflected XSS.This issue affects XStore Core: from n/a through 5.3.5...

The vulnerability of the Security component of the Oracle Retail Xstore Office software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Retail Xstore Office software relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2024-21136

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2024-21136

Vulnerability in the Oracle Retail Xstore Office product of Oracle Retail Applications component: Security. Supported versions that are affected are 19.0.5, 20.0.3, 20.0.4, 22.0.0 and 23.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2024-21136

Oracle CVE-2024-21136 corresponds to a pre-authenticated path-traversal vulnerability in Oracle Retail Xstore Office (Oracle Retail Applications, Security component). Affected versions are 19.0.5, 20.0.3, 20.0.4, 22.0.0, and 23.0.1. The issue allows an unauthenticated attacker with network access...

PT-2024-4995 · Oracle · Oracle Retail Xstore Office

Name of the Vulnerable Software and Affected Versions: Oracle Retail Xstore Office versions 19.0.5, 20.0.3, 20.0.4, 22.0.0, and 23.0.1 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xstore Office, potentially resulting in...

The vulnerability of the XStore plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the XStore plugin of the WordPress content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

CVE-2024-33564

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33564

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33563

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33561

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33555

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33555

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33561

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33563

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

CVE-2024-33555

CVE-2024-33555 (WordPress XStore Core) is documented as a Missing Authorization vulnerability affecting XStore Core up to version 5.3.8. Public sources list affected products as the 8theme XStore Core plugin for WordPress, with remediation guidance indicating upgrading to a version later than 5.3...

CVE-2024-33561 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

CVE-2024-33561 WordPress XStore theme <= 9.3.8 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...