XStore

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Vulnerabilities

  • Input validation vulnerability in XStore 9.5.3

    Open

    The XStore theme for WordPress has a security issue that allows anyone to run arbitrary shortcodes without proper validation. This means that even unauthenticated individuals can execute these shortc...

    Read More
  • Access violation vulnerability in XStore 9.5.4

    Fixed

    The XStore theme for WordPress has a security vulnerability that affects all versions up to 9.5.4. Attackers with at least Subscriber-level access can exploit this vulnerability to include and run .p...

    Read More
  • Access violation vulnerability in XStore 9.3.5

    Fixed

    The XStore theme for WordPress has a security issue that allows unauthorized users to access it without proper permission. This vulnerability is present in versions up to and including 9.3.5, making ...

    Read More
  • Access violation vulnerability in XStore 9.3.5

    Fixed

    The theme called XStore, used for WordPress websites, has a security issue that allows unauthorized changes to be made to the data. This happens because a certain function does not check for the righ...

    Read More
  • Access violation vulnerability in XStore 9.3.5

    Fixed

    The XStore theme for WordPress has a security issue that allows unauthorized users to gain access. This happens because the theme does not check for certain permissions when using a function. This me...

    Read More
  • Input validation vulnerability in XStore 9.3.5

    Fixed

    The XStore theme for WordPress has a security flaw in versions up to 9.3.5. This flaw, known as SQL Injection, is caused by not properly protecting user input and not properly preparing the SQL query...

    Read More
  • Input validation vulnerability in XStore 9.3.5

    Fixed

    The XStore theme for WordPress has a security issue called Local File Inclusion. This means that hackers who are not logged in can access and run any files on the server, including ones with PHP code...

    Read More
  • Input validation vulnerability in XStore 9.3.5

    Fixed

    The XStore theme for WordPress has a security issue that could potentially allow hackers to inject harmful scripts into web pages. This can happen if a user is tricked into clicking on a link. The vu...

    Read More