WP eStore
WP eStore has 8 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 8 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 8 disclosures.
The most common weakness is Cross-Site Scripting, behind 6 of the records (75%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 8 issues recorded for WP eStore has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Bob Matyas.
Highest severity on recordCVSS 6.1
CVE-2024-6134WP eStore <= 8.5.5 - Reflected Cross-Site Scripting via Product Editing
Read the full analysisVulnerability Records
8 records
Showing 1–8 of 8 reports
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C