CVE-2024-33553

The 8theme XStore Core WordPress plugin (versions

CVE-2024-33551

The 8theme XStore Core WordPress plugin (versions n/a through 5.3.8 ) is vulnerable to an unauthenticated SQL Injection due to improper neutralization of special elements in SQL commands. This flaw allows attackers to execute malicious SQL commands on the database, potentially leading to data the...

CVE-2024-33552

The 8theme XStore Core WordPress plugin (versions 5.3.8 and earlier ) is vulnerable to an Improper Privilege Management flaw that enables Privilege Escalation . This vulnerability allows for unauthenticated account takeover , potentially granting an attacker high-level access to the system. The i...

CVE-2024-33556

CVE-2024-33556 involves the WordPress plugin XStore Core (8theme) with an Unrestricted Upload of File with Dangerous Type vulnerability. Affected versions are XStore Core up to 5.3.8 (root note uses “from n/a through 5.3.8”). Connected sources confirm the issue is a file upload vulnerability, ena...

CVE-2024-33558

CVE-2024-33558 is listed as a Missing Authorization vulnerability in 8theme XStore Core affecting versions up to 5.3.5. The initial entry notes impact as Missing Authorization; connected documents reference the XStore Core product and its 5.3.5 end of line, but do not provide concrete exploitatio...

CVE-2024-33554

CVE-2024-33554 : Reflected XSS in 8theme XStore Core due to improper input neutralization during web page generation. Affected: XStore Core from n/a up to 5.3.5. Consequences include potential script execution in a victim’s browser when interacting with vulnerable pages. Connected sources (e.g., ...

CVE-2024-33555

CVE-2024-33555 (WordPress XStore Core) is documented as a Missing Authorization vulnerability affecting XStore Core up to version 5.3.8. Public sources list affected products as the 8theme XStore Core plugin for WordPress, with remediation guidance indicating upgrading to a version later than 5.3...

CVE-2024-33557

CVE-2024-33557 describes a path traversal vulnerability in 8theme XStore Core (WordPress plugin) that enables PHP Local File Inclusion. Affected range: XStore Core from n/a through 5.3.8. The CVSS metrics indicate high impact (C/H, I/H, A/H) with network attack vector and low attack complexity; p...