CVE-2024-33559

Published Apr 29, 2024·Updated Jun 17, 2026

NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.

Public Exploits & PoCs1 found

PoC: WordPress-XStore-theme-SQL-Injection

(CVE-2024-33559) The XStore theme for WordPress is vulnerable to SQL Injection due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free