VYPR
← All advisories
High severity8.5NVD Advisory· Published Jun 4, 2024· Updated Jun 17, 2026

CVE-2024-33557

CVE-2024-33557

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 8theme XStore Core allows PHP Local File Inclusion.This issue affects XStore Core: from n/a through 5.3.8.

Affected products

4
  • 8theme/Xstore Core3 versions
    cpe:2.3:a:8theme:xstore_core:*:*:*:*:*:wordpress:*:*+ 2 more
    • cpe:2.3:a:8theme:xstore_core:*:*:*:*:*:wordpress:*:*range: <5.3.9
    • (no CPE)range: <=5.3.8
    • (no CPE)range: n/a
  • WordPress/Xstore Corellm-fuzzy
    Range: <=5.3.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.