← WordPress Vulnerabilities
WordPress security by component

Big Store

Big Store is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 27, 2025; the highest CVE/CNA score is 4.3.

Theme slug: big-store

CVE-2025-30881: Big Store: A security weakness

Big Store is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedMar 27, 2025
Safe version guidanceSee mitigation notes
Safe version
Mar 27, 2025 CVE-2025-30881
Big Store: A security weakness
Big Store is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVD5.4
Nov 12, 2023 CVE-2023-27431
Big Store: Cross-site request forgery
Big Store is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE4.3
NVD8.8