XStore vulnerabilities

3 known CVE vulnerabilities in XStore, translated and rated.

CVE-2026-105065High
The XStore plugin for WordPress contains a Reflected XSS vulnerability caused by improper neutralization of input during web page generation. The issue affects versions prior to 9.7.9.
CVE-2025-64192Medium
The XStore theme by 8theme is vulnerable to missing authorization, allowing exploitation of incorrectly configured access control security levels. The issue affects versions before 9.6.
CVE-2025-60100Medium
XSS vulnerability in the XStore theme for WordPress allows injection of HTML/JavaScript code into a web page. Affects versions up to and including 9.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS