CVE-2026-42640 WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Classified Listing = 5.3.8 versions...

PT-2024-25323 · 8Theme · Xstore Core

Name of the Vulnerable Software and Affected Versions: XStore Core versions n/a through 5.3.8 Description: The issue is related to a Missing Authorization vulnerability in the 8theme XStore Core. This vulnerability affects versions from n/a through 5.3.8. Recommendations: For versions n/a through...

WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability

Limited Arbitrary File Upload vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin XStore Core versions = 5.3.8...