PatchTheCVExstore core vulnerabilities and fixes
Recent CVEs affecting xstore core, with upgrade or downgrade steps. 7 tracked.
Also searched as: xstorecore.
xstore core has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 7. Most recent: 2024-06-09. Highest priority: CVE-2024-33552 (score 51/100).
- CVE-2024-33558 MEDIUM 6.5 UPGRADE Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3
- CVE-2024-33556 HIGH 8.2 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in 8theme XStore Core.This issue affects XStore
- CVE-2024-33555 HIGH 8.1 UPGRADE Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3
- CVE-2024-33554 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme X
- CVE-2024-33553 CRITICAL 9.0 UPGRADE Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a
- CVE-2024-33552 CRITICAL 9.8 UPGRADE Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affec
- CVE-2024-33551 CRITICAL 9.3 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme X
FAQ
How do I fix xstore core vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xstore core being exploited right now?
None of the tracked xstore core CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xstore core CVE should I patch first?
CVE-2024-33552 currently ranks highest (51/100): Improper Privilege Management vulnerability in 8theme XStore Core allows Privilege Escalation.This issue affec.