← WordPress Vulnerabilities
WordPress security by component

Extreme Store

Extreme Store is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Feb 20, 2026; the highest CVE/CNA score is 9.8.

Theme slug: extremestore

CVE-2025-69404: Extreme Store: Code execution

Extreme Store is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedFeb 20, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 20, 2026 CVE-2025-69404
Extreme Store: Code execution
Extreme Store is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending