WordPress security by component
estore
estore is a WordPress theme with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 18, 2026; the highest published CVSS base score is 7.1.
Theme slug:
estoreLatest vulnerability
CVE-2026-108485: eStore: Reflected cross-site scripting
eStore is a WordPress theme affected through 1.6.13. The CNA vector requires no authenticated privileges. In this vulnerability, attacker-controlled request input can be reflected into an executable browser context and run script with victim interaction; the export does not identify the reflected parameter. The export does not disclose a concrete endpoint, action, parameter, function, or full input-to-operation path beyond those facts. The completed CNA record identifies 1.6.14 as fixed.
| Safe version |
|
||
|---|---|---|---|
| Oct 18, 2026 |
CVE-2026-108485
eStore: Reflected cross-site scripting
eStore is a WordPress theme affected through 1.6.13. The CNA vector requires no authenticated privileges. In this vulnerability, attacker-controlled request input can be reflected into an executable browser context and run script with victim interaction; the export does not identify the reflected parameter. The export does not disclose a concrete endpoint, action, parameter, function, or full input-to-operation path beyond those facts. The completed CNA record identifies 1.6.14 as fixed.
|
1.6.14 |
CVE7.1
|