CVE-2024-33553

CRITICAL EXPLOITED

8theme Xstore Core < 5.3.9 - Insecure Deserialization

Title source: rule

Description

Deserialization of Untrusted Data vulnerability in 8theme XStore Core.This issue affects XStore Core: from n/a through 5.3.5.

Scores

CVSS v3 9.0
EPSS 0.0069
EPSS Percentile 71.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploitation Intel

VulnCheck KEV 2024-04-25

Classification

CWE
CWE-502
Status published

Affected Products (1)

8theme/xstore_core < 5.3.9

Timeline

Published Apr 29, 2024
Tracked Since Feb 18, 2026