Veille CVE

Recherche « 8theme XStore »

3 CVE

  1. CVE-2026-105065 7.1 Élevée

    8theme.com XStore

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflected XSS.This issue affects XStore: from n/a before 9.7.9.

  2. CVE-2025-64193 7.5 Élevée

    8theme XStore

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in 8theme XStore xstore allows PHP Local File Inclusion.This issue affects XStore: from n/a through < 9.6.1.

  3. CVE-2025-64189 7.1 Élevée

    8theme XStore Core

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme XStore Core et-core-plugin allows Reflected XSS.This issue affects XStore Core: from n/a through < 5.6.