xstore vulnerabilities and fixes

Recent CVEs affecting xstore, with upgrade or downgrade steps. 3 tracked.

xstore has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-06-09. Highest priority: CVE-2024-33561 (score 41/100).

• CVE-2024-33564 HIGH 8.8 UPGRADE Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
• CVE-2024-33563 HIGH 7.6 UPGRADE Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.
• CVE-2024-33561 HIGH 7.5 UPGRADE Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8.

FAQ

How do I fix xstore vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xstore being exploited right now?

None of the tracked xstore CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xstore CVE should I patch first?

CVE-2024-33561 currently ranks highest (41/100): Missing Authorization vulnerability in 8theme XStore.This issue affects XStore: from n/a through 9.3.8..

RSS feed for xstore · ← Back to latest CVEs