CVE-2024-33558: WordPress XStore Core plugin <= 5.3.5 - Limited Arbitrary File Download vulnerability
Published Apr 29, 2024
·Updated
Missing Authorization vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.
Affected Software
3 affected components
8theme Xstore Core Wordpress<5.3.9
8theme XStore Core>=5.3.5
WordPress XStore Core<=5.3.5
Event History
Apr 29, 2024
CVE Published
via MITRE·08:15 AM
Data Sourced
via MITRE·08:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-33558?
CVE-2024-33558 is considered a critical vulnerability due to its missing authorization issue.
2
How do I fix CVE-2024-33558?
To fix CVE-2024-33558, you should update the XStore Core plugin to version 5.3.6 or later.
3
What versions are affected by CVE-2024-33558?
CVE-2024-33558 affects XStore Core versions from n/a through 5.3.5.
4
What kind of vulnerability is CVE-2024-33558?
CVE-2024-33558 is a missing authorization vulnerability, allowing unauthorized access.
5
Is there a workaround for CVE-2024-33558?
Currently, there is no known workaround for CVE-2024-33558 other than updating to the latest version.