Xstore vulnerabilities
We track 1 vulnerability in Xstore products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest Xstore vulnerabilities
- 8.6 High severity
Xstore: Improper Neutralization of Special Elements used in an SQL Command
The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection