A vulnerability classified as problematic was found in 8theme XStore Core Plugin up to 5.5 on WordPress. Affected is an unknown function. Executing manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2025-64190. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.