Xstore

xstore

Vulnerabilities:

11

Last Updated:

April 4, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-10-14
Title
XStore | Multipurpose WooCommerce Theme < 9.6 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 9.6
CVSS
8.8 (high)
Published
2025-09-26
Title
XStore < 9.6 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 9.6
CVSS
6.5 (medium)
Published
2025-09-10
Title
XStore < 9.6 - Missing Authorization
Fixed in
Fixed in 9.6
CVSS
4.3 (medium)
Published
2025-09-10
Title
XStore < 9.6.1 - Authenticated (Subscriber+) Local File Inclusion
Fixed in
Fixed in 9.6.1
CVSS
7.5 (high)
Published
2025-09-10
Title
XStore < 9.6.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 9.6.1
CVSS
6.1 (medium)
Published
2024-04-25
Title
XStore < 9.3.9 - Missing Authorization
Fixed in
Fixed in 9.3.9
CVSS
5.3 (medium)
Published
2024-04-25
Title
XStore < 9.3.9 - Missing Authorization
Fixed in
Fixed in 9.3.9
CVSS
4.3 (medium)
Published
2024-04-25
Title
XStore < 9.3.9 - Unauthenticated Local File Inclusion
Fixed in
Fixed in 9.3.9
CVSS
9.8 (critical)
Published
2024-04-25
Title
XStore < 9.3.9 - Subscriber+ Arbitrary Options Update
Fixed in
Fixed in 9.3.9
CVSS
8.8 (high)
Published
2024-04-25
Title
XStore < 9.3.9 - Unauthenticated SQLi
Fixed in
Fixed in 9.3.9
CVSS
8.6 (high)
Published
2024-04-25
Title
XStore < 9.3.9 - Reflected Cross-Site Scripting
Fixed in
Fixed in 9.3.9
CVSS
7.1 (high)