8theme.com CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH 8theme.com CVE published 2026-10-15

CVE-2026-105065

The XStore theme for WordPress has a Cross Site Scripting (XSS) vulnerability in versions before 9.7.9. This issue allows for Reflected XSS attacks. Defenders should assess exposure and prioritize upgrading to version 9.7.9 or later. The CVE record was published on 2026-10-15T17:00:15.222Z and has not been modified since then. The vulnerability affects WordPress installations using the XStore theme, requi [truncated]