Lucene search
+L

450 matches found

Cvelist
Cvelist
•added 2024/06/09 12:04 p.m.•44 views

CVE-2024-33563 WordPress XStore theme <= 9.3.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

7.6CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/09 12:04 p.m.•81 views

CVE-2024-33563

CVE-2024-33563 is described as a Missing Authorization vulnerability affecting 8theme XStore. The initial description states impact on XStore from n/a through 9.3.8. Connected sources corroborate a broader set of XStore/XStore Core vulnerabilities with high CVSS metrics, but do not provide a conf...

8.8CVSS7.7AI score0.00354EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/06/09 12:02 p.m.•42 views

CVE-2024-33564 WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

8.8CVSS0.00323EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/09 12:02 p.m.•21 views

CVE-2024-33564 WordPress XStore theme <= 9.3.8 - Arbitrary Option Update vulnerability

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

8.8CVSS6.9AI score0.00323EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/09 12:02 p.m.•90 views

CVE-2024-33564

CVE-2024-33564 refers to a Missing Authorization vulnerability in the WordPress XStore (8theme XStore) theme. Public details indicate an Arbitrary Option Update issue affecting XStore versions up to 9.3.8 (inclusive). The root cause is missing authorization allowing unauthorized changes to theme ...

8.8CVSS6.4AI score0.00323EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•2 views

CVE-2024-33555: Missing Authorization

Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.8...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/09 12:00 a.m.•23 views

PT-2024-25329 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions n/a through 9.3.8 Description: A Missing Authorization vulnerability affects 8theme XStore. The issue allows for exploitation due to missing authorization checks. No information is provided about the estimated number of...

9.8CVSS6.6AI score0.00434EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/06/09 12:00 a.m.•20 views

WordPress plugin XStore security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS6.7AI score0.00434EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/06/09 12:00 a.m.•26 views

PT-2024-25332 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions 9.3.8 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects 8theme XStore, allowing unauthorized access. The estimated number of potentially affected devices...

8.8CVSS6.5AI score0.00323EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/06/09 12:00 a.m.•17 views

WordPress plugin XStore security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00354EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•2 views

CVE-2024-33561: Missing Authorization

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

9.8CVSS5.8AI score0.00434EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/09 12:00 a.m.•16 views

PT-2024-25331 · 8Theme · 8Theme Xstore

Name of the Vulnerable Software and Affected Versions: 8theme XStore versions n/a through 9.3.8 Description: A Missing Authorization vulnerability affects 8theme XStore. The issue allows for exploitation due to missing authorization checks. No information is provided about the estimated number of...

8.8CVSS6.6AI score0.00354EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2024/06/09 12:00 a.m.•18 views

PT-2024-25323 · 8Theme · Xstore Core

Name of the Vulnerable Software and Affected Versions: XStore Core versions n/a through 5.3.8 Description: The issue is related to a Missing Authorization vulnerability in the 8theme XStore Core. This vulnerability affects versions from n/a through 5.3.8. Recommendations: For versions n/a through...

8.8CVSS6.4AI score0.00417EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•3 views

CVE-2024-33564: Missing Authorization

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

8.8CVSS5.8AI score0.00323EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/09 12:00 a.m.•3 views

CVE-2024-33563: Missing Authorization

Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8...

8.8CVSS5.8AI score0.00354EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/09 12:00 a.m.•13 views

WordPress plugin XStore Core security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00417EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/06/09 12:00 a.m.•21 views

WordPress plugin XStore security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.8CVSS6.7AI score0.00323EPSS
SaveExploits0References2
NVD
NVD
•added 2024/06/04 1:15 p.m.•30 views

CVE-2024-33560

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore allows PHP Local File Inclusion.This issue affects XStore: from n/a through 9.3.8...

9CVSS9.2AI score0.00597EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/04 1:15 p.m.•33 views

CVE-2024-33557

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...

8.8CVSS8.5AI score0.0056EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/04 1:15 p.m.•18 views

CVE-2024-33557

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8...

8.8CVSS5.8AI score0.0056EPSS
SaveExploits0References1
Rows per page
Query Builder