eStore

eStore has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for eStore has a vendor fix available, so running the current release closes it.

All of these findings were reported by Jacek Sowiński (dzaku). eStore is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all eStore vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2026-108485

eStore <= 1.6.13 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-10-16 10:36	eStore <= 1.6.13 - Reflected Cross-Site Scripting eStore <= 1.6.13	`CVE-2026-108485`	6.1 Medium	Jacek Sowiński (dzaku)	Yes

Showing 1–1 of 1 reports

Latestv1.6.14

eStore

Author

ThemeGrill

4.6(114)

92/100

Last Updated

2026-10-14 (10d ago)

Active Installs

2,000+

Downloads

710,541

Requires WP

Requires PHP

7.4+

Created

2016-03-14 (11y ago)

eStore is a clean, beautiful and fully customizable responsive WooCommerce WordPress theme. This theme packs many premium features and several custom widgets which helps making your online store professional and well organized. Theme is fully compatible with WooCommerce and YITH WooCommerce Wishlist plugins. As an online store owner, attracting customers and selling products will be lot easier with this theme. Check the demo here: https://themegrilldemos.com/estore/ and get free support here: https://wordpress.org/support/theme/estore/