目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

XStore Core 产品漏洞列表 / CVE 中文分析 12

XStore Core 产品相关 12 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

XStore Core 是一款广泛使用的 WordPress 主题插件,本页面聚合了该产品的安全漏洞信息。收录内容涵盖跨站脚本、权限绕过及文件包含等多种高危缺陷,时间范围覆盖从早期版本至近期发布的最新漏洞记录。通过本页,您可以快速追踪官方安全补丁的动态,深入分析特定弱点在代码层面的表现形式,或检索该组件历史上的所有已知风险,从而辅助开发人员制定精准的修复策略与升级计划,确保网站基础设施的安全性。

ベンダー: 8theme

CVE IDタイトルCVSS深刻度公開日
CVE-2026-25306 WordPress XStore Core plugin <= 5.6.4 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-03-25
CVE-2026-25307 WordPress XStore Core plugin < 5.7 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-02-19
CVE-2025-64190 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2025-12-30
CVE-2025-64189 WordPress XStore Core plugin < 5.6 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-12-18
CVE-2024-33555 WordPress XStore Core plugin <= 5.3.8 - Multiple Authenticated Broken Access Control vulnerability CWE-862 8.1 High2024-06-09
CVE-2024-33557 WordPress XStore Core plugin <= 5.3.8 - Local File Inclusion vulnerability CWE-22 8.5 High2024-06-04
CVE-2024-33552 WordPress XStore Core plugin <= 5.3.8 - Unauthenticated Account Takeover vulnerability CWE-269 9.8 Critical2024-05-17
CVE-2024-33556 WordPress XStore Core plugin <= 5.3.8 - Limited Arbitrary File Upload vulnerability CWE-434 8.2 High2024-05-17
CVE-2024-33558 WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability CWE-862 6.5 Medium2024-04-29
CVE-2024-33553 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated PHP Object Injection vulnerability CWE-502 9.0 Critical2024-04-29
CVE-2024-33551 WordPress XStore Core plugin <= 5.3.5 - Unauthenticated SQL Injection vulnerability CWE-89 9.3 Critical2024-04-29
CVE-2024-33554 WordPress XStore Core plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2024-04-29

XStore Core 产品累计公开 12 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。