Store Commerce
Store Commerce has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Store Commerce has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Michael. Store Commerce is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-22339Store Commerce <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Store Commerce
Author
aThemeArt
shopstoreStore Commerce is a modern and flexible child theme of the shopstore eCommerce theme, designed specifically for use with the Elementor page builder. Its minimalist design makes it a great choice for a wide range of storefront websites. Outstanding choice for basically any kind of online store, apparel store, startup business, personal blog, auto parts or freelancer site. With its extensive array of WooCommerce features, this template is suitable for selling almost any type of product online. Including electronics, fashion items, sports equipment, furniture, accessories, automobiles, jewelry, gadgets, and more. Stands out from others thanks to its advanced product search, smart swatches, and modal fly cart features. Work with the most popular plugins search as Smart Slider 3, Gutenberg, WooCommerce, WP Super Cache, Contact Form 7, Yoast SEO, SiteOrigin. So, you could be built all niches and classic shop, store or markets in a matter of minutes, without having to write a line of code.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C