Pricing
Case studies
Login
Start trial
XStore Core
8theme.com
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
9 fixed
9 Mitigation rules
Cross Site Scripting (XSS) vulnerability
< 5.6
Oct 17, 2025
Limited Arbitrary File Download vulnerability
<= 5.3.8
Apr 25, 2024
Local File Inclusion vulnerability
<= 5.3.8
Apr 25, 2024
Limited Arbitrary File Upload vulnerability
<= 5.3.8
Apr 25, 2024
Multiple Authenticated Broken Access Control vulnerability
<= 5.3.8
Apr 25, 2024
Reflected Cross Site Scripting (XSS) vulnerability
<= 5.3.8
Apr 25, 2024
Unauthenticated PHP Object Injection vulnerability
<= 5.3.8
Apr 25, 2024
Unauthenticated Account Takeover vulnerability
<= 5.3.8
Apr 25, 2024
Unauthenticated SQL Injection vulnerability
<= 5.3.8
Apr 25, 2024