Store Commerce

Store Commerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Store Commerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Michael. Store Commerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Store Commerce vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-22339

Store Commerce <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Store Commerce screenshot
Latestv1.2.8

Store Commerce

aThemeArt

Author

aThemeArt

4.0(1)
80/100
Last Updated
2025-10-11 (11mo ago)
Active Installs
100+
Downloads
54,666
Requires WP
5.0+
Requires PHP
7.0+
Created
2019-12-03 (7y ago)
Parent Theme
shopstore

Store Commerce is a modern and flexible child theme of the shopstore eCommerce theme, designed specifically for use with the Elementor page builder. Its minimalist design makes it a great choice for a wide range of storefront websites. Outstanding choice for basically any kind of online store, apparel store, startup business, personal blog, auto parts or freelancer site. With its extensive array of WooCommerce features, this template is suitable for selling almost any type of product online. Including electronics, fashion items, sports equipment, furniture, accessories, automobiles, jewelry, gadgets, and more. Stands out from others thanks to its advanced product search, smart swatches, and modal fly cart features. Work with the most popular plugins search as Smart Slider 3, Gutenberg, WooCommerce, WP Super Cache, Contact Form 7, Yoast SEO, SiteOrigin. So, you could be built all niches and classic shop, store or markets in a matter of minutes, without having to write a line of code.

Tags
BlogE commerceOne columnCustom menuGrid layoutPhotographySticky postTwo columnsLeft sidebarPost formatsCustom headerRight sidebarTheme optionsThree columnsFooter widgetsFeatured imagesFlexible headerCustom backgroundThreaded commentsTranslation readyFull width template

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C