A vulnerability was found in 8theme XStore Core Plugin up to 5.3.8 on WordPress. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload.

This vulnerability was named CVE-2024-33556. The attack can be initiated remotely. There is no exploit available.